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ABSTRACT: 

The proceedings of the Monterey Symposium on Design Problems in 
Aircraft Structures provide a basic survey of design problems 
from the engineer's viewpoint. Further analysis of the present 
situation draws attention to some essential aspects which are 
not yet generally recognized. This leads to the conclusion that 
recent design problems cannot be solved on a technological level 
alone. An organizational effort is needed to disseminate available 
information. Beyond this, the complexity of interactions must 
be understood more thoroughly and this requires an educational 
effort on a broad basis. A practical and systematic approach 
toward the solution of these problems is developed. 

The present report covers the final phase of a project under the 
title Interface of Materials and Structures on Airframes. This 
project is supported by: Naval Air Systems Command 
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FOREWORD 



This report forms the final part of the project Interface of 
Materials and Structures on Airframes and includes the Proceedings 
of the Monterey Symposium on Design Problems in Aircraft Sturctures. 

The project Interface of Materials and Structures on Airframes 
has been sponsored by the Naval Air Systems Command under the 
cognizance of the Structures Administrator and has been conducted 
at the Naval Postgraduate School, Monterey, California, Two 
earlier reports were published as Part 1: Basic Design Considerations 

and as Part 2: Outline of Decision Process in Structural Design. 

They were concerned with basic aspects of the design process as 
they influence problems of interaction between materials and 
structures . 

In order to coordinate these considerations with recent 
experience in industry and to recognize those design problems 
which most companies have in common, a symposium on Design Problems 
in Aircraft Structures was held at the Naval Postgraduate School 
in Monterey, California, on July 15 and 16, 1971. About twenty 
invited participants represented aerospace industry, government 
agencies, and research institutes. Prepared talks on particularly 
significant aspects of design problems were given by engineers 
thoroughly familiar with the present state of the art and 
discussion sessions followed. 

The proceedings of the symposium are given in Section I and 
related questions with various comments are listed in Section II to 
stimulate general thoughts regarding design problems . 

Section III contains some basic considerations and conclusions, 
attempting to bring together the viewpoints of design engineers, 
engineering management, and government agencies. It begins with 
a consideration of technological problems and recognizes that they 
are being approached systematically and competently on an 
engineering level. This leads, however, to the realization that 
such work on a purely technological level will not suffice to 
solve our design problems. Additional organizational and 
educational efforts will be required. Some of them have been 
recommended already by committees concerned with these problems. 

Some more aspects are added and an integrated approach is 
suggested on the final pages of this report (pages III- 21 et seq.). 

There is no consensus of opinions in this field. Conclusions 
must be based on the subjective interpretation of facts. They 
always have to be submitted to much discussion and careful 
examination. The considerations of Section III incorporate ideas 
developed by widely scattered people. Any shortcomings and 
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controversial aspects of the discussion are the obvious responsibility 
of the coordinator of this project. The conclusions must not be 
construed as necessarily representing the attitude of the Navy 
Department . 

The participants of the symposium and many individuals 
throughout the aerospace industry made this report possible by 
extending a spirit of full cooperation and giving generously of 
their sparse time and hard-gained experience to discuss problems 
which were not always easily defined. 
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SECTION I 

PROCEEDINGS OF SYMPOSIUM ON 
DESIGN FROBLEM3 IN AIRCRAFT STRUCTURES 



SECTION I 



PROCEEDINGS OF SYMPOSIUM ON 
DESIGN PROBLEMS IN AIRCRAFT STRUCTURES 



The symposium on Design Problems in Aircraft Structures was 
held at the Naval Postgraduate School in Monterey, California, on 
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WELCOMING REMARKS 



M. U. Claus er 
Provost 

Naval Postgraduate School 



It is with some feeling of nostalgia that I come hack into 
this closer contact with men from the aircraft industry. After 
having spent quite a number of years building airplanes, I am 
glad to tell you how very pleased I am to welcome you here at 
the Postgraduate School and how appropriate I think it is to have 
a conference of this sort at this time. I am sorry that Admiral 
Goodfellow is in Washington and is not able to also extend his 
most hearty welcome to you. We are also very thankful to the 
Naval Air Systems Command for the sponsorship of this symposium 
and we welcome Commander Cundari in the efforts to organize and 
help sponsor this work. 

I would like to take a few moments, because I have this 
sort of background and continuing interest, to speculate a little 
bit about the future but I would like to get a running start 
from the past. The 19^0 f s were certainly the great days for the 
aircraft industry as I remember. There was the dictate of 
President Roosevelt that we were going to build 50,000 airplanes 
and it really happened during World War II. Then came the very 
interesting transition to jet airplanes and even rocket airplanes 
and I can remember the time I spent on the design of the Skyrocket 
airplane which held the world T s altitude record and several speed 
records and how we had to work our way through some new thinking. 
Then, in the fifties, we turned to rockets with all the trials 
and tribulations and in the sixties we had the ability to really 
have ballistic missiles and space programs, with the emphasis 
on complex systems and ultra-reliability. 

Now, as we come to the seventies, it is very interesting to 
see this return to emphasis on the aircraft but there are some 
trends which, it seems to me, pose a little bit of a dilemma. 

It is this problem of complexity. Costs have gone up as an 
exponential function. With our concern about the cold war and 
about our competition in the scientific war, as you might call 
it, and our space competition with Russia, somehow we always 
felt that a great nation could afford the increase in price. 

We seem to still want to make things even more complex but we 
must recognize that in the last few years the nation is no longer 
willing to support an exponential rise in costs. 

If you add together the R & D costs on such things as DoD, 
AEC, and NASA, you get a nearly constant growth rate of about 
20 % per year from World War II to at least the middle sixties. 

But at the same time, the population was growing only 1 or 2^, 
and the gross national product only about This trend cannot 

continue indefinitely . 
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Further, we probably can no longer accept a reduction in 
the numbers of airplanes we buy in order to be able to obtain 
the greater complexity. The military services clearly cannot 
afford to procure just one very costly airplane. I think the 
new situation throws a double burden on the designer. He must 
now make the equipment more effective and at the same time 
cheaper . 

There will be a great responsibility on the designer and 
many people will be watching as the realities of the situation 
do unfold. It is a real challenge to get people together who 
will think about how we are going to handle the complexity of 
design and at the same time can make the airplane continue to 
be more effective and not just keep going up in price . 

Here at the Postgraduate School, as in a number of universities, 
we certainly realize the needs and problems which our graduates 
will face. We recognize the obligation to give them the intimate 
knowledge to cope with the decision-making and operating problems 
of the future. So it is a pleasure to find a way to interact 
with the aircraft industry more intimately and it is a pleasure 
to have you here. Anything we can do to make your stay here more 
profitable, more enjoyable, we stand ready to do it. I thank 
you very much for the opportunity to welcome you this morning. 
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INTRODUCTORY REMARKS: 



THE NATURE OF DESIGN PROBLEMS 



Ulrich Haupt 

Naval Postgraduate School 



Design problems in aircraft structures have existed as long 
as there has been aircraft design. They usually found their 
solution by following a general pattern along the lines of 
engineering judgment and experience, experiments and analysis. 

In case of special difficulties the specialist had to exert 
special efforts, usually resulting in more experiments and more 
refined analytical methods. Adding up all these efforts over 
more than six decades, we see the results in form of jet trans- 
portation and space flight and there is good justification for 
taking pride in substantial accomplishments. 

Now, however, we have reached a stage where recent experience 
forces us to reappraise our situation. We feel that we are close 
to the boundaries of our present concepts and that the complexity 
of our problems is somewhat frightening. In the past, we could 
approach a problem by isolating it and applying all the available 
expert knowledge and experience. This is still the case for many 
of those present and future problems which are the bread and 
butter of the engineering profession. Yet the really challenging 
problems which we have to face become increasingly difficult and 
usually we cannot isolate them anymore. They are actually of a 
different nature. 

Think of our situation in fatigue. We began by isolating 
the problem of crack initiation. This took us to the problem of 
rate of crack propagation, then to the problem of fail-safe 
design, then to the problem of residual strength and fracture 
mechanics . In each one of these fields we have to deal with a 
subset of problems -- including material selection, structural 
concepts, stress level and stress concentration, manufacturing 
methods, load spectrum, and service life. Fatigue is a problem 
of detail design but it frequently has its roots in early 
decisions far upstream in the design process and may result in 
catastrophic consequences due to a special combination of 
circumstances way downstream in the service life. All of them 
are interwoven. 

In addition to such problems of detail design, we have 
another kind of problems which are typical of advanced design. 
Examples are: 
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• How do we define the criteria when we want to apply 
newly developed materials to present-day aircraft -- 
considering weight, cost, risk, life cycle, uncertainties 
of load spectrum, etc? 

How do we optimize materials and structural configuration 
for thermal and chemical environments as complex as we 
have to face them for supersonic cruise or space shuttle? 



These challenging problems in detail design and in advanced 
design have in common that they incorporate a large number of 
parameters. Most of them are interdependent and many of them are 
not clearly defined at all. Beyond these aspects of interdependence 
and quantity, a new qualitative aspect is introduced. Up to now, 
the main emphasis in aircraft has been on airworthiness. For 
our new type of design problems, however, we have to combine 
airworthiness with design optimization under very complex 
conditions. This takes us into a new field. For both detail 
design as well as advanced design we have to develop an outlook 
which is much wider than the conventional knowledge, experience, 
and expertise of the specialist. This question of basic outlook 
is closely connected with design problems. 

* * * 

It may be helpful if we look at developments which have 
become visible in engineering education. Throughout the 1950’s 
increasing emphasis was given to science curricula until we 
realized in the later 1960’s that engineering aspects had been 
seriously shortchanged. We came to understand the basic 
difference between science and engineering. The scientific 
approach starts from a given problem and proceeds by analytical 
and experimental methods — simplifying and clarifying a problem 
to its skeleton in order to establish and understand basic 
principles. On the other hand, the engineering approach envisions 
a goal and proceeds by defining the problem, creating alternative 
possibilities, analyzing them by scientific methods and making a 
decision about the optimum solution -- taking into account all 
the inherent complexities and practical consequences in order 
to find a practical answer. 

So we finally began to realize that engineering is more than 
applied science. The engineer must have a different attitude and 
a different viewpoint than the scientist. Slowly, much too 
slowly, there is a growing emphasis on creative engineering, 
value judgment, and interdisciplinary responsibilities. It 
will take some time until this process becomes clear and the 
results will penetrate into industry, but a new trend is visible. 

* * * 
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There seems to be an analogy between the situations in 
education and in industry. Science and engineering in education 
have their counterparts in the professional activities of 
analysis and design in industry. In education we are realizing 
that engineering incorporates science as a most essential 
ingredient but has to reach into wider aspects. Correspondingly 
in industry design may include analysis as a most essential 
ingredient but again it has to reach into wider aspects. However, 
I should not belabor this point because some of my friends hold 
different opinions on it. 

There is full agreement that our analysts have been at the 
forefront of developments during the last few decades . In the 
field of structures they have, among many other things, developed 
a beautiful system of finite elements for basic airworthiness 
calculations and they are working on mathematical aspects for 
structural optimization. Yet our actual difficulties are not 
covered by these somewhat abstract considerations of airworthiness 
and optimization. Our difficulties are of a very practical 
nature with an endless number of real-life complexities. Beyond 
analytical aspects we have to 

• recognize any possible mode of failure; 

• evaluate uncertainties and risks; 

establish a value system for any optimization procedure. 



Here we have design problems in the fullest and widest sense 
of the word. For their solution we require an analytical mind 
coupled with an imaginative spirit. This is expressed in the 
designer's intuition as it has been applied in the past when 
the designer could handle a few parameters on his sliderule . 

Yet for our present design problems with an ever-increasing 
number of parameters we have to develop a new methodology. 

Such a new methodology is a challenge to do in a systematic 
way what we have been doing intuitively. Two different aspects 
can be considered: 

• firstly, a technological effort to reduce the risk of 
structural failure; 

• secondly, a methodical effort to establish a process of 
decision making under complex conditions. 



Regarding the first aspect, namely the technological effort, 
a decisive step is taken in the new Air Force program on Advanced 
Metal lie Structures. This program is directed toward improved 
technologies in materials, structures, and manufacturing and 
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emphasizes the importance of a systematic transfer of information. 
It is an eminently practical, hardware-oriented, program. As such 
it does not sponsor any ideas which are still somewhat vague in 
themselves . 

Regarding the second aspect, the methodical effort toward 
the decision making process, this is unfortunately still in a 
category of vagueness. Perhaps it depends mostly on becoming 
aware of the problem and on communicating about it. There w ill 
not be any quick and ready solution but it seems that fundamental 
elements could crystallize sooner if a common concern would be 
developed. A great effort is exerted by specialists regarding 
mathematical aspects of optimization but before we can ever hope 
to use any mathematical refinements, we have to clarify some of 
the most basic aspects of the decision-making process. 

Decision making is an essential part of design. Many 
variations can be found in other fields and it should be easy to 
point out how primitive the state of the art is . From the 
highest level of deciding about national policies and war or 
peace to the very personal level of choosing a marriage partner, 
important decisions are being made in a somewhat haphazard way. 

Any self-respecting gambler would estimate his chances more 
thoroughly. 

There is nothing mysterious about decision making and 
optimization. The basic requirements are an adequate problem 
statement and objectivity — and this is where we usually fall 
short. Clearly defined values as well as uncertainties have to 
be included. The values will generally be of a variety of 
dimensions — weight, cost, time, reputation, etc. Utility 
theory or similar methods of decision making provide a basic 
tool to express these multi -dimensional values on a single 
scale. The corresponding detail manipulations can be left to 
operations analysts but every designer will have to acquaint 
himself with the underlying concepts . 

Notions like uncertainties and value systems still have a 
long way to go before they become household words in aircraft 
design. Yet it is the designer who has to establish a merit 
function, basing it on his experience and making it clearly 
visible so that any parameters can easily be submitted to 
scrutiny and modification. This field is still wide open and 
largely unexplored. It concerns both detail design and advanced 
design and represents design problems of a very different nature 
from those to which we have been accustomed. 

In the subsequent presentations and discussions we want to 
stay at first on familiar grounds and consider some specific 
problems of technology which are of much concern for new materials, 
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including fatigue 5 fracture mechanics and fail-safe. Afterwards 
we will see whether we can proceed toward some basic aspects of 
methodology. This should take us to some ill-defined problems 
which 5 nevertheless 5 maybe of fundamental importance. 

There are many viewpoints which sometimes look quite 
different but frequently can be reconciled when some good will 
exists and a real effort is made. Good will can be created as 
soon as we become aware how important a problem is and how much 
we need a solution. How successful our efforts will be — that 
is often beyond our jurisdiction. All we can do is to make a 
sincere attempt -- and that is the purpose of this symposium. 



i 
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TRANSLATING HIGH-STRENGTH STEEL CHARACTERISTICS 
INTO EFFECTIVE STRUCTURAL DESIGNS 



W. H. Sparrow 
LTV Aerospace Corp. 
Vought Aeronautics Division 



ABSTRACT: Development of test methods to characterize high- 

strength steels is discussed up to the present fracture 
mechanics methods. These test methods are related 
to service experience by specification requirements, 
structural criteria, and design practices. Examples 
are shown for parts which failed unexpectedly--pointing 
out the need for materials and structures engineers 
to improve their ability to communicate with design 
engineers . 



I would like to review briefly some of the attempts of the 
materials engineers to characterize high-strength steels for the 
design engineer. For the purpose of this discussion, high-strength 
steels will be defined as those having an ultimate strength of 
200,000 psi or above, used in the range of -65° to 400°F. These 
steels have yield -to-ultimate ratios from .80 to .98 with minimum 
elongations of approximately 5 1o in 2 inches. 

My basic thesis is that we have not provided the designer 
with many quantitative numbers to work with for load-carrying 
capacity designs. We give him tensile strength and modulus and 
that is about all he can put into a formula. When you talk about 
things like ductility, impact strength, corrosion resistance, 
these are just comparative values. There is no ready way to put 
them into a numerical calculation and use them. 

I would like to go back, since I have about as much gray 
hair as most of you here, and think of the 30 ? s when we looked 
at the mechanical properties, including impact and ductility, 
of a new steel. If they were similar to one which had already 
a lot of good service life, you assumed that you could endorse 
it for design. Then, when we got into the war, much acceleration 
went on, and we used a big variety of steels with a lot of odd 
combinations of chemistry because of alloy shortages. We worked 
pretty much from the basis of tensile strength and hardenability, 
and we used all kinds of things which probably would make us 
shudder today. We also worked with a lot of specialized tests, 
including notched tensile fatigue tests. But again, we had a 
har'd time relating those numbers to a specific design and 
idealized specimens bore very little resemblance to actual parts. 
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Now the latest thing is the fracture mechanics approach and 
here we are getting a little closer to the numerical idea. But 
the first thing for which we have to characterize a steel is K^ c 
and many of you know the war which is going on about the type of 
specimen to use and the wide variety of values for a given heat 
of steel. The designer is pretty much at the mercy of an empirical 
system when he is making a part out of a slightly different 
cross-section or form. He cannot make a clear-cut decision 
without a lot of specialized help and specialized work in the 
laboratory, and even with all that, we still have failures. 

In the early 1950's, we got enamored with the idea that we 
could take some of our more conventional steels, specifically 
good old SAE 4340, and move them up to the 260,000 psi heat-treat 
level. A classical paper by Melcon of Lockheed-California* was 
published in 1953 and many of the aircraft companies, including 
mine, did work of their own and decided that this was a promising 
approach to get the weight down. We proceeded on the F-8 Crusader 
airplane, which was designed in the 1953 period and flew in the 
early part of 1955 and which had a considerable amount of steel 
parts in the 260,000 heat-treat level, particularly in the landing 
and arresting gear systems. 

We had some problems and I would like to review several 
typical examples to show you how the designer and the materials 
and structures engineers can get themselves into a trap. I am 
sure all of you have dozens more in your own experience. Some 
of the problems occurred fairly early in the programs; others 
took time to develop in the environment in the fleet. 

Fig. A-l shows the main landing gear inner cylinder shell, 
made of 260,000 heat-treat steel, with a clevis at the upper 
end. The interesting thing in this design was that the designers 
found the space in this upper cylinder could be used as a pneumatic 
bottle for an emergency actuation of flaps and gears in case of 
a hydraulic failure. This was not part of the landing gear system 
at all. Every time the engine was running, the cylinder was 
pressurized to 2000 psi and when the engine was shut down, it 
bled off slowly by leakage. Explosive failure occurred not during 
a landing but while the airplane was being pivoted on the carrier 
deck around one wheel which resulted in maximum stress at the 
clevis . 

We did not have an electron microscope at the time but it 
was obviously a very brittle failure. All the standard tests 
had been performed but we never had a failure nor any problem at 



*Melcon, M.A. , Ultra High Strength Steel for Aircraft Structures, 
Product Engineering, October 1953- 
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all with this part in the plant at any time. No matter what we 
did 3 we could not explain at that time exactly what was going 
on. Being 260,000 heat treat, we did not use electrolytic cad 
plate on it. We knew about hydrogen embrittlement, so we tried 
to keep away from that area. At that time, vacuum cadmium 
plating was not developed and so we just had an organic finish 
on these parts. 

Subsequently, when we got the electron microscope several 
years afterward, we found out that some minor scratches in the 
paint had permitted the part to corrode in a very small area, 
about 10 or 15 thousandths in diameter. The little bit of 
corrosion resulted in enough hydrogen to hydrogen-embrittle 
the part in that local area and also to give it some stress 
corrosion. The designer had veen quite ingenious but the 
combination of maximum stress in the clevis, hoop tension due 
to internal pressure, H- embrittlement , and minor stress corrosion 
resulted in failure. The part is now vacuum cadmium plated and 
painted and is no longer pressurized as a pneumatic bottle. 

Fig. A-2 shows the horizontal stabilizer shaft which is 
heat-treated to 260,000. Through a series of offset tapered 
pins, a little over an inch in diameter, it is attached to the 
actuating horn of Fig. A-3. We found a few of these shafts 
cracked and after some checking — it was also in the pre -electron 
microscope era -- we decided that a washer at the tapered pin 
might be getting misaligned. So we designed a specially shaped 
washer to fit the inside contour of the shaft and to avoid local 
high stresses. We also added some more paint in local areas 
and did not seem to have any more problems. 

Then, about six or eight months later, we found some cracks 
again. We could not put our finger on the definite thing but 
we made a few more changes and still have had occasionally some 
cracked parts. Examination of these later parts by electron 
microscope revealed hydrogen embrittlement and we have tried 
to trace the source of it and to keep control over the processing. 
The part is vacuum cadmium plated and does not get any electro- 
lytic cadmium. So here we have a design which, from the 
designer f s point of view, looked like an efficient and good way 
to get high strength and close tolerance and where impact and 
ductility values did not indicate any reason why this would 
not work. 

Fig. A-3 shows the stabilizer horn which is also a 260,000 
heat-treat part. For this part it turned out that the 260 
high heat treat was specified because the structures engineers 
were told by value engineering that this would cost hardly any 
more. Like most structures people, they were looking to a growth 
version of the airplane and left an extra margin where it can 
be done without overpenalizing design and weight. So this 
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is one part where we moved the heat treat hack to 200. With 
4340 steel you have to stay out of the 220-240 range for 
metallurgical reasons, just as a precautionary move. 

Then, recently, we had a failure again. The reason was 
typical for the way things can happen. We had a new vendor 
who came out a little high in hardness. He pulled the test 
part which went with it, got the ductility, and felt there was 
no problem because he was giving a little more than required. 
However, when we dropped the heat-treat to 200,000, we decided 
that we could electrolytically cad plate it because, generally 
speaking, there is not any hydrogen embrittlement problem with 

200.000 heat treat. Now with 246,000 heat treatment and electro- 
lytic cad plating, we had hydrogen embrittlement coming out the 
ears. Again the designer did his job but there was not enough 
communication about the processing precautions with the 
manufacturing people. 

Fig. A-4 is a swinging arm for the arresting gear at the 

260.000 heat treat level. It gets a certain amount of impact 
and we had failures as shown. This was a good old traditional 
case where we had a big discussion among the structures, design 
and material engineers about how much interference fit these 
pressed-in bushings could have without getting above the thresh - 
hold stresses for stress corrosion cracking. However, in cad 
plating there was some tolerance which could get involved 
occasionally. You will say in pressing them in you should have 
shaved the excess cad plating off. But we had a manufacturing 
operation which deep -free zed the bushing and dropped it in. 

So they shrunk it down to undersize and did not have to get the 
cad plate shaved off but when it came back to room temperature, 
we were above the stress allowables by just enough to get us 
into trouble. 

This part is now 200,000 heat treat. There seems to be 
some magic about this number. Things like hydrogen embrittlement 
and stress corrosion are not very critical at this level. For 
any bushings which we have now in high-strength parts, both 
aluminum and steel, we try to prevent water entrance. We provide 
a section around the bushing for a sealant groove to keep the 
water out of the interface between the bearing and the fitting 
even though it is press fit. We forbid deep freezing bushings 
because of the tolerance and condensed water problem. 

Fig. A-5 is a 260 H.T. bellcrank on a droop mechanism. It 
was designed for stiffness and did not need the 260,000 strength 
but it failed in a fatigue sense. This was pretty much an 
interior part when it was on the deck and the droop was retracted. 
However, there was full flowing air going around this part 
during the extended position and it got enough corrosion to 
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provide a pit. Again, the heat treat was dropped down to 200,000 
and then the corrosion effects did not appear to be as critical 
in fatigue. We also went to more protection, did a little 
aluminum spraying in the beginning, and then went finally to 
electrolytic cad. 

Fig. A-6 seems to be hard to explain. This is the main 
fin beam in both the F-8 and A-7 airplanes and it is about 
40 x 35". It is forged from a 4340 billet and in the center 
where normally the worst material would be, the part is split 
in two directions. There are holes drilled into it, and it 
has only primer for protection. The part is 260,000 heat treat, 
has 3 million flight hours on it, and has never failed. By 
the way, the note "crack" in the figure only refers to a specimen 
which they tried to straighten during a heat treat operation. 

Now you could say that the reason for no failure is that 
this part is lowly stressed or is in a mild environment. Well, 
this part does not have a sustained load like in a pressure 
cylinder or in a pressed-in bushing. It is designed for a 
gust condition which rarely occurs and the total spectrum life 
is easy. But since you have to stay out of the 220-240 range 
for this type of steel, the next jump down to 200 would have 
been too big. The design also has no sharp corners and the 
holes are straight for standard close tolerance bolts. Besides, 
it is an interior part in warm, dry air and is protected from 
the engine heat by a stainless steel shield. Even with all 
these good things I am still surprised that we have a zero 
failure rate. 

This last example shows that you should not panic if a 
catastrophic failure occurs on some part at the same strength 
in the, same steel. We had some other parts in the airplane 
which were not loaded any higher but were in more exposed areas 
and failed. It is hard to tell the designer when he is really 
in trouble about corrosion unless the environment can be very 
accurately defined. 

I might say that we have had some cleanliness problems in 
steel but we tried to control them by specifying values for 
reduction of area in specified locations in each heat of steel. 
This seemed to give the fewest problems along the way in 
unpredicted failures. We felt this was our protection but, 
at the same time, how do you explain an empirically picked 
number to the designer? 

Well, I just wanted to show you some histories of how we 
have given the designer some problems and have complicated 
them right along. Designers and structures engineers need to 
understand the effect of stress raisers, residual stress due to 



i 



i-i4 



processing and induced assembly stresses due to clevis type 
parts or other misalignments. Effects from stress corrosion 
and hydrogen embrittlement have to he considered in selecting 
strength level. When working with high-strength steels, 
process engineers, designers, tool planners, and manufacturing 
personnel need to he educated in the catastrophic effects of 
grinding, plating, cold-straightening, cleaning, weld repairing, 
etc., without proper post stress relief treatments. 

The designer also needs more education along the lines of 
NIT so that he knows what defect size can he detected. Even 
if we are great believers in magnaflux, you still can magnaflux 
a part and not find a crack which is there. I think, almost 
intuitively, our own people have hacked up from welding ideas 
in high strength steels quite a hit. Talking about steels of 
300,000 psi, they are wary of sustained stresses and are trying 
to keep the stress level down at a fairly conservative level. 

That hurts from the weight and cost point of view pretty fast. 

We worry not only about things that happen in our own shop 

hut we are also indoctrinated by the troubles everyone else 

has. Risks are involved in this area and when you want to move 

off to something new, you have to convince not just your engineering 

and manufacturing management hut you are involved pretty strongly 

with the operating management even when they are not engineering 

oriented. 

Most failures in high-strength steels result from three 
major sources, namely: (l) improper design; (2) improper 

processing; (3) undetected flaws. Now we are giving the designer 
a new input from fracture mechanics, with new tools and new 
concepts and there is no table where he can look up the answers. 

Few failures are the result of fracture toughness per se hut 
its effect on premature failure must he understood. 

I would like to conclude in saying that there is no 
substitute for communication. We have to get engineering, 
manufacturing, and quality control together hut I think we 
also will have to develop a more definitive and quantitative 
way of characterizing high-strength steels than the present 
empirical data. 
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Figure *1 - Inner Cylinder, Main Landing 
Gear Inner Cylinder 








Figure 2 - Unit Horizontal Stabilizer Shaft 






Figure 3 - Unit Horizontal Stabilizer Horn 





Figure '4 - /arresting Gear Swinging 



Figure '5 - Droop Eellcranl 
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Figure -6 Beam, Vertical Stabilizer 



FATIGUE -- RELATING PAST EXPERIENCE 
TO DESIGN 

J. C. Ekvall 
Lockheed- -California 



Abstract: Three general approaches are used to design aircraft 

structures for a long service life: control of design 

details, establishment of design stress levels, and 
analysis combined with experiments. These approaches 
are discussed and illustrated by examples from previous 
experience. Examples include the use of the stress 
severity concept and how it relates to fatigue life, 
fatigue quality index, and design stress levels of 
similar structures — emphasizing that determination 
of safe life is not yet an exact science and must be 
based on previous experience. 



The previous speaker gave us some examples of how to make 
use of experience. As you know, there is no good theoretical 
approach for predicting fatigue life of an aircraft component 
and so, in order to circumvent this problem, previous experience 
is used to form a baseline from which to work. 

Structures which have performed adequately over a long 
period of time provide assurance that a similar design for a 
similar application will perform just as well. However, problems 
arise when trying to exploit new materials and new technology 
where previous experience is lacking. In this case, experience 
must be supplemented by adequate test data, although it is not 
always easy to obtain test data applicable to what is going to 
happen ten or twenty years hence. In this presentation I would 
like to discuss how our previous experience is used to the best 
advantage in coming up with new designs and how it relates to 
the overall problem of design, detail design and advanced design. 

Figure B-l illustrates how service experience is utilized 
in the design of new aircraft and where the information is used 
in relation to each phase of the program. A satisfactory service 
life can be achieved by approaching the problem on three 
different levels : 

a. Control of aircraft design details -- based on service 
experience of design details from previous structures; 

b. Establishment of design stress levels — based on stress 
levels utilized in previous aircraft structures; 
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c. Theoretical and experimental considerations -- for new 
designs where previous experience is not available. 

For any new aircraft structure each of the three above approaches 
must be utilized to achieve a good design from a fatigue point 
of view. Therefore, I would like to illustrate the use of these 
three approaches with some examples. 

In the first approach, information gathered from experience 
has to be presented in a simple format and brought to the 
designer’s attention so that he will look at the data and try 
to avoid these problems . Figure B-2 shows a common type of 
design detail in connection with access holes. Small holes in 
the vicinity of a bigger hole inevitably mean superposition of 
stress concentration. An acceptable solution can be achieved 
for many applications by eliminating the fastener hole in the 
vicinity of highest stress concentration due to the cut-out. 

For the preferred solution of using a clamp-on door, consideration 
must be given, of course, to the effect of fretting fatigue due 
to rubbing action between the clamp-on door and the structure. 

Figure B-3 shows another type of problem which is often 
encountered in service and which consists of cracks in the 
corners of door cut-outs. Attempts have been made to try to 
reinforce these areas to reduce the stress levels and prevent 
the crack; however, this has not always been successful. The 
best approach in this case is to make a fairly generous radius 
in the corners of these types of cut-outs, using the rule-of- 
thumb shown in Fig. B-3. With this type of design concept, 
fewer cracking problems have developed in service . 

Figure B-4 illustrates another area which may easily be 
overlooked as not a structural problem. A forging of this type 
needs to be attached to some type of jig for machining to final 
dimensions. Tooling holes are drilled at various locations 
for the purpose of holding the forging to the jig during 
machining. Often these tooling holes are located where the 
bending stresses are essentially zero. However, the shear 
stresses in a beam are usually high where the bending stresses 
are low and fatigue cracks due to high shear stresses have 
occurred at these locations. Also, often the tooling holes do 
not have as good a surface finish as attachment holes in other 
parts of the structure. For example, tooling holes may have 
scratches or other imperfections which amplify the stress 
concentration effect of the hole. As shown in Fig. B-4, plugging 
tooling holes with interference fit fasteners can increase the 
fatigue life 4-fold while reducing the fatigue quality level, 
Kfest? to less than 4.0. On our new designs we prefer to reduce 
the stresses by reinforcing locally around the hole. 
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Figure B-5 refers to a problem which is often overlooked. 
This is fatigue cracking as a result of deflections from one 
part of the structure induced on another part of the structure . 

In this example the nacelle fillet region had a doubler attached 
to the nacelle skin to prevent localized buckling. To prevent 
fatigue cracking at the end of the doubler it was necessary to 
extend the doubler and install additional rows of fasteners to 
stiffen up the area. 

These simple types of examples provide the designer with 
some basic information as a first line of defense against fatigue 
cracking problems. Next, let us consider the selection of 
design stress levels. There are two ways of specifying design 
stress levels, either by putting limitations on the design 
ultimate tensile stress of the material or on the stress due to 
lg loading conditions . 

Figure B-6 shows one technique of selecting preliminary 
design stress levels. Based on service experience on previous 
aircraft, it relates maximum allowable design stress level to 
the number of flights when fatigue cracking problems were 
encountered. Most designs fall within the cross hatched band, 
therefore the percentage of ultimate tensile strength which can 
be utilized for a new design depends on the fatigue life that 
is desired in future service. 

The results of spectrum fatigue tests of components can 
also be utilized to aid in the selection of design stress 
levels. The fatigue quality index, K, is determined from 
fatigue test results as illustrated in Fig. B-7* The analysis 
is based on the test spectrum which was applied to a given 
structural component up to the time when a fatigue crack was 
initiated, and a set of S-N curves for various Kj. values 
representative of the material in which the crack was started. 

With these data, a fatigue analysis is conducted for several 
Kj. values, determining E n/N for each case, and finally 
calculating by interpolation on the value which corresponds 
to Z n/N = 1. This Kfc value is designated the fatigue quality 
index K, of the structural component. 

A number of components have been analyzed and compiled as 
shown in Fig. B-8. This Figure shows the distribution of K 
values obtained from 42 test results. The fatigue quality index 
ranges from slightly below 3-0 to above 5.0, with a mean of 
3.65 or 3*7. So we can say that the fatigue quality of aircraft 
structures is something a little worse than an open hole which 
would have Kt = For a new design, you might not want to 

use the average K value as a basis for structural design since 
you would have only a 50 $, chance of passing a fatigue test. 
Therefore, we usually try to design for a fatigue quality level 
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of about 4.0. In some areas of the structure a poorer quality 
or higher K value can be tolerated because the stresses have 
to be low for reasons other than fatigue. This type of analysis 
is just a one-parameter (K) analysis. There are a lot of other 
variables that have an effect on fatigue life, but with 43 
results, you really do not have enough data to consider more 
variables in the preliminary stages of design. 

Figure B-9 shows how to use the K value to arrive at a 
preliminary design stress level. For a new application, you 
first develop spectrum loading conditions which the structure 
is likely to encounter during its service life. Then you 
perform a fatigue analysis with the same S-N data that was 
used for the analysis of fatigue test results. If various 
materials are being considered, you can conduct the analysis 
using S-N data for the various materials to obtain a relationship 
between the design stress or reference stress and the fatigue 
quality index as shown in Fig. B-9. For this particular example, 
if you picked a K value of 4 as being the type of quality you 
think can be achieved in the structure, then a 43,000 PSI 
stress level would be permitted for 2024-T3 aluminum alloy. 

This analysis was conducted for a particular service life so 
that the values in Fig. B-9 are all for the same number of 
flights or the same number of flight hours anticipated in 
service . 

Assuming you have done the best job you can and are coming 
up with satisfactory design stress levels and design qualities, 
however, there are still new materials, new fasteners and new 
approaches that you want to apply to the structure for which 
you have no previous experience. In this case, you will have 
to conduct various types of tests to develop information and 
correlate the data with similar tests on structures in which 
you have confidence. So, let's look at some of the types of 
tests that are conducted and the results of some example cases . 

Figure B-10 shows some results of two-row lap joint tests 
with aluminum countersunk fasteners. The peculiar S-N curve 
is the result of three types of failure. In the low-cycle 
high-stress region, the failure occurs where you would normally 
expect it, i.e., originating at the center of a fastener hole 
where the highest stress concentration is located. In the 
transition section, failure occurred in the countersunk sheet 
away from the fastener holes, and in the high-cycle low-stress 
region, the failure took place in the plain sheet also away 
from the fastener holes. In the high-cycle region (> 300,000 
cycles), the cracks initiated at the edge of the attachment 
holes in the interface between the two sheets . This is where 
the greatest rubbing action takes place and failures were caused 
by fretting fatigue. The data in Fig. B-10 illustrates dangers 
of extrapolating from previous experience, say less than 
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300,000 cycles, into a different region of life expectancy. For 
this example, you would get over a 50 $ reduction in stress 
level over what you’d expect with a normal extrapolation from 
low cycle part of the S-N curve. 

Fatigue tests have been conducted on simple lap joints 
using lubricants, shims, etc. to try to eliminate the fretting 
fatigue type failure. Aluminum bronze between mating surfaces 
worked pretty well, teflon films did not work very well. How- 
ever, for each application, tests have to be conducted to find 
out each technique that will work because with fretting fatigue 
the same technique doesn’t always work for different applications. 

Figure B-ll is another example of a fretting fatigue 
failure. This is the case of a countersunk hole in the skin of 
the fuselage and the example shown is from a pressurized panel 
test. Fatigue cracks initiated in the black area in the 
transition region from the countersunk to the cylindrical portion 
of the hole opening due to the flexure and fretting action 
when the fastener was rubbing against the sheet material in 
this general region. To avoid this type of problem, it is 
necessary to install more fasteners or larger fasteners to 
reduce the bearing and bending stress. 

Figure B-12 shows the results of a series of tests on 
three-row lap joints conducted to investigate what type of 
fastener might be best for a given application. Hone of these 
failures represent bolt failures. The normal theory for the 
design of mechanically fastened joints is that if you use 
interference fit fasteners, you are going to get an improvement 
and if you use high clampup, you are going to get an improvement. 
So, combining these effects, you should get a terrific improvement. 
Oddly enough, the results did not come out that way. We got a 
very small amount of difference between the various fasteners 
tested. Only the two upper fasteners gave a little better 
result; however, it still isn’t a dramatic improvement. The 
main reason for this anomally, I think, is again that fretting 
fatigue failure is coming into the picture and it is limiting 
the degree of improvement you can get by changing the fastener 
and the interference. Therefore, the state of the art of the 
material fastener system was pushed to the point where fretting 
fatigue type failures were occurring and something else must be 
done to avoid this problem. 

Figure B-13 shows the results of some other tests, where a 
series of tests were conducted to evaluate various design 
alternatives in order to come up with a good design. This 
example is a typical fuselage joint encountered in an aircraft 
structure. A continuous stringer is attached to the skin and 
the continuous frame inside of the stringer is attached to the 
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skin by an angle which is cut out in the stringer region. The 
first concept was the simplest one without any attachment between 
stringer and frame. Crack initiation was at 10,000 cycles in 
the angle at the rivet attachment to the stringer. 

The next design used a slightly different stringer shape 
which allowed a rivet attachment between stringer and frame . 

This gave an almost 9-fold improvement in crack initiation time. 
The crack was in the stringer at the rivet attachment to the 
frame which moved the fatigue critical point away from the skin. 

A third design resulted in an additional 10-fold improvement 
in crack initiation time. This was due to an added clip on the 
side of the frame so that the load was more evenly distributed 
across the stringer. This shows how simple joints can be 
developed in the laboratory by running simple tests. This is 
probably the best way to go in many cases since the analysis 
is unreliable and rather difficult. It does indicate what 
good detail design can accomplish for you. 

Another approach for coming up with a good design is to 
use finite element analysis techniques. Figure B-l4 shows 
four different designs for a wing-to-fuselage joint with tapered 
stringers. The first two designs have a combination shear and 
tension connection, the last two designs are double shear 
joints. Normally, a tension-shear type connection is not a 
very good design from a fatigue point of view, but you can make 
it work provided you put enough material in the right places . 

For this particular application, it was considered because of 
the simplification of final assembly. 

The finite element analysis takes into account the 
flexibility of the fastener systems, so the load transfer 
from skin to stringers is more or less properly accounted for. 

The resulting stress concentration or stress severity factors 
are shown at various places in Fig. B-l4. The finite element 
analysis model is very useful for looking at various methods 
of shaping the material and for reducing the stress concentration 
down to a minimum. It permits one to come up with more or less 
an optimum design for each concept instead of running many 
fatigue tests. The example shows how a good design can be 
evolved using computer analysis techniques in conjunction with 
a minimum amount of test data. 

The finite element type of analysis results in a stress 
severity factor and does not really predict the lifetime. So 
a correlation was developed between the stress severity factor 
(obtained from finite element analysis) and the fatigue quality 
index which is obtained by fatigue analysis of test failures. 

The correlation is shown in Fig. B-15 which indicates that a 
stress severity factor of about 3 corresponds to a fatigue quality 
index of about 4. 
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After design details and stress levels have been established 
and basic testing has been conducted , the final proof comes by 
conducting a full-scale fatigue test on the complete aircraft 
structure. There you integrate the effects of adjoining structure 
which you cannot simulate adequately in the laboratory on 
components. Fatigue is not an exact science yet, but much can 
be learned from experience and applied to new types of design. 

The use of this experience in conjunction with a suitable fatigue 
test program will provide a reasonable assurance of adequate 
service life. 
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TOOLING HOLES PLACED NEAR THE NEUTRAL AXIS OF AN T-BEAM 
CAUSED FATIGUE FAILURE DUE TO THE SHEAR STRESSES IN THE WEB 




NACELLE 



WING-NACELLE 

FILLET 
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NACELLE 

DEFLECTIONS 




FILLET ATTACHMENT SCREWS 



NARROW FILLET SKIN DOUBLER 
(2 ROWS OF SPCTWELDS) 



FILLET SKIN 



WIDE FILLET SKIN DOUBLER EXTENDED TO HERE 
(4 ROWS OF SPCTWELDS) 



SECTION A-A 



LOCAL BUCKLING OF THE WING-NACELLE FILLET, INDUCED BY DEFLECTIONS OF 
THE NACELLE, CAUSED FATIGUE CRACKING IN THE FILLET SKIN AT THE EDGE OF 
THE NARROW FILLET SKIN DOUBLER (2 ROWS OF SPCTWELDS). THE DESIGN WAS 
IMPROVED BY THE USE OF A WIDE FILLET SKIN DOUBLER (4 ROWS OF SPOTWELDS). 
NO CRACKS OCCURRED WHERE THE WIDE FILLET SKIN DOUBLER WAS INCORPORATED. 
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Fig. B-6 
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Fig. B-8 
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DESIGN ALLOWABLE TENSION STRESS, KSI 
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Fig. B-13 
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FRACTURE MECHANICS CONSIDERATIONS 
IN DESIGN AND MANUFACTURE 



W. C. Dietz 

General Dynamics - Fort North 



Abstract: Problems encountered on the F-lll in detail design and 

inspection procedures are discussed; subsequent programs 
toward establishing service life integrity and fracture 
mechanics data are described; and methods for deter- 
mination of inspection intervals and crack retardation 
are given. The designer* s problem is summarized as 
shown in Fig. C-39? 40 — emphasizing the need for 
intimate association of the designer with manufacturing 
and inspection operations. 



As you are all well aware, there are many basic considerations 
involved in structural design. These have been briefly summarized 
and shown on Fig. C-l. I would like ^however, to discuss two 
specific items concerned with service life, Detail Design and 
Manufacturing, as they have been responsible for most of the 
difficulty in service life structural certification of the F-lll, 
and in fact, I believe are the major contributors to service 
life problems on most aircraft. 

Before discussing these items in detail, I believe it is 
important to get a feel for the significance of the structural 
problems which have occurred in military aircraft service usage 
and to view them from the proper perspective. An examination 
of the statistics covering a period of about eight recent years 
indicates the incidents of inflight primary structural failures 
of military aircraft as shown on Fig. C-2. Only a fraction of 
the failures shown have resulted in loss of the aircraft but the 
magnitude of the problem is evident. It is also apparent that 
the majority of failures occurred in the wing structure. 

Fig. C-3 shows the loss statistics for USAF fighters due 
to all noncombat causes. An average yearly loss of 139 airplanes 
translates to a little over 11 airplanes destroyed per 100,000 
flight hours. More specifically the losses due to structural 
failures have been about one per year or an average rate of 
.103 per 100,000 flight hours, or just under 1 % of the total 
USAF noncombat fighter losses. Fig. C-4 presents the same 
data by aircraft type. 

I would now like to discuss a few of the problems which 
occurred in the structural history of the F-lll during structural 
certification and service usage. The most significant of these 
have been associated with the high heat treat steel parts and 
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have been the result of the detail design or the fabrication and 
inspection aspects. Most of the problems, as shown on Fig. C-5, 
were isolated in the laboratory during full-scale fatigue tests 
or during the course of inspection and proof test of the airplane. 
However, there has been one inflight structural failure. You 
will note that our experience is in part similar to the experience 
of LTV described in an earlier presentation in that three of the 
problems were due to stress corrosion cracking, none of these 
were service induced. 

There is a considerable amount of high heat treat steel 
used in flight critical parts on the F-lll airframe. The 
definition of critical in this case is a part or component 
essential to maintaining structural integrity of the primary 
flight structure. The total usage of steel represents approximately 
20$ of the structual weight of the airplane or about 5 >000 pounds. 

As shown in Fig. C-6, the use of steel in critical parts is 
essentially concentrated in the heavily loaded structures, such 
as the wing carrythrough box, wing pivot fittings, tail support 
bulkhead and longerons . With few exceptions , the steel employed 
in the F-lll is D6AC, a derivative of an alloy which was initially 
developed by Ladish. It is similar in many of its characteristics 
to 4340 except it does not exhibit a blue brittle heat treat 
range. Extensive use is made of welding on the three major wing 
fittings; however, this has not been a source of any service or 
test problems. 

The F-lll structural test program included a full-scale static 
test and a full-scale fatigue test article. Fig. C-7 shows the 
fatigue test article set-up for testing. The fatigue test 
originally was planned to be conducted, as shown on this chart, 
on a complete airplane including wing, fuselage and tail. As 
the program progressed it was revised to test individual major 
components to expedite the program. This was particularly 
feasible for the F-lll due to the nature of the wing attachment to 
the fuselage inherent in the variable sweep design. 

The first failure in the airplane fatigue test program 
occurred in the wing carrythrough structure approximately 
years ago, as shown on Fig. C-8. Approximately 1800 cycles of 
4g load had been applied when failure occurred in this wing 
support structure. The origin of the failure was a taper -lok 
bolt which attaches an aluminum door to the rear spar structure. 

The crack at the point of unstable crack growth was approximately 
.2”, and progressed across the sculptured lower plate of the box. 

In the bolt hole adjacent to the origin of the failure, it was 
discovered on post-mortem examination that a fatigue crack also 
existed. 

In view of this early failure, an extensive investigation 
was undertaken, and it soon became obvious that there were two 
problems. As shown in the magnified pictures of Fig. C-9 5 it 
was found that some rather rough drilled and reamed holes 
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existed. The profilcorder measurements shown indicate the 
surface condition. Measured with a prof ilometer , the surface 
finish is RFE of 200 to 250. There was also concern about the 
stress levels in view of the evidence of fatigue in the adjacent 
hole to the failure origin, and a stress survey was conducted 
in the steel flange corner radius. Strain gages were installed, 
as shown on Fig. C-10, on the flange and slug area not only on 
a full-scale test specimen which was set up specifically for this 
purpose, but also on the static test airplane and on a flight 
test aircraft. With a nominal stress of approximately 80,000 
psi in the slug area, a factor of about 2.5 times this value 
existed on the top edge of the flange . 

The solution therefore involved both design and manufacture. 
Figure C-ll is a simplistic chart but it makes the point. With 
the high stress concentration as measured and the rough hole 
surface finish a low fatigue life is indicated. It was necessary 
to lower the stress level and to reduce the taper-lok bolt loads 
by design, and additionally, revise the manufacture technique 
to improve bolt hole finish and obtain better bolt fits to 
achieve a lower effective stress concentration. 

As quite a large number of parts had already been manufactured, 
retrofit considerations were of prime importance. A considerable 
amount of analytical and test effort was required to develop a 
simple retrofitable fix that could be applied without causing 
other problems within the constraints of minimum rework to the 
high heat treat steel structure. The final design is shown in 
Fig. C-12 and represents the design correction aspect of the problem. 
The gusset design, though not evident from the chart, required 
precise sculpturing to obtain the optimum stress distribution 
necessary to reduce the flange stresses and to achieve minimum 
bolt loads . The significant reduction in stress level achieved 
is apparent from the chart. 

At the same time and during the period of several months of 
testing of the design improvement change, process improvements 
were also being vigorously pursued. The resulting changes are 
shown on Fig. C-13, and involved the development of special 
multi-fluted carbide tapered reamers, and revised manufacturing 
procedures including such things as use of improved coolants 
for the reaming process. An extensive test program on effects 
on fatigue life of bolt interference fit was also conducted, and 
as a result the installation tolerances were considerably 
tightened. 

These detail changes in design and manufacture were 
subsequently proven by subjecting a full-scale test specimen to 
the equivalent of 24,000 flight hours or 6 service lives with- 
out failure. 

As noted previously, the fatigue test program was revised 
to test major components, and Fig. C-l4 shows the wing in the 
fatigue test fixture. The F-lll contractual requirements are 
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that the airplane be designed and tested to four lives. At 
just over three lives in the initial test of the wing a failure 
occurred at the point shown in Fig. C-15. Figure C-l6 is a 
photograph of a production part with the failure line indicated. 

The failure initiated in the lower plate of the fitting at one 
of the fuel flow holes machined in the integral ribs . 

Figure C-17 shows the fractured part at the point of failure 
origin. The test had been run in repeated spectrum loaded blocks 
so the block markers were quite clear and permitted the determination 
of the crack growth rate. The critical crack depth for this 
part is about t^ n which results in a surface crack length of 
approximately . We were well aware that these fuel flow holes 

did represent a stress concentration and this area was used as a 
fatigue analysis control point. Moreover, a number of element 
tests of the part had previously been run satisfactorily to 
specification requirements . It was determined on examination of 
these original test specimens and the full-scale wing test that 
the surface finish of the test specimens was better than the 
fatigue test full-scale wing. 

When this part was initially designed, we were not as adept 
at using finite element analysis as we have since become and 
subsequently, a fine grid finite element analysis was made of 
this area as depicted in Fig. C-l8. The average stress field of 
103,000 psi, used as a reference, corresponds to the maximum 
stress expected in the fatigue test spectrum. The close 
correlation of the calculated values to measured values, which 
were taken from strain measurement of a full-scale part is 
evident. The origination of the fatigue crack was at the left 
lower corner of the fuel flow hole where the stress levels 
indicate approximately 190 ksi. 

Again, the problem existed of having a large number of parts 
manufactured and installed on airplanes which were flying. While 
this particular failure represented no immediate service problem, 
in view of the relatively long demonstrated life, improvement 
was required. Figure C-19 shows the application of an epoxy 
boron reinforcement on this steel plate. It was fortunate that 
tjie outside surface of the fitting was relatively flat without 
any ribs or stiffeners thus providing a good surface for bonding 
of the composite. Through development test and analyses, a basic 
design and orientation of boron laminates was selected which was 
most compatible with the modulus of elasticity of the steel, and 
provided acceptable bond shear loads. The objective of this 
reinforcement was fatigue enhancement, not static load since 
static testing had been successfully completed, so the design 
was tailored to specifically accomplish the objective of reducing 
the stress levels at the fatigue critical point. Figure C-20 is 
a photograph of this somewhat unique application of filamentary 
composites as a reinforcement. It is quite easily applied in 
production in an autoclave, and can be installed on complete 
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wings with use of portable tools employing electric heaters and 
pressure bags. The reinforcement weighs 6 pounds , and by 
analysis essentially doubles the fatigue life of the part. This 
design has been tested on a complete full scale wing through 
five lives without evidence of any fatigue distress. 

Figure C-21 illustrates the effectiveness of the reinforcement. 
The values are measured stress levels from a full scale test wing 
and show the significant reductions and uniformity of stress 
level achieved. The finish of the rib intersections with the 
plate were also improved. 

I would like to touch on one other problem which resulted 
in a flight failure. Figure C-22 indicates a manufacturing 
defect in a wing pivot fitting which escaped detection during 
manufacture. The small light zone at the base of the black area 
is the only region showing evidence of fatigue. Failure occurred 
during a 4g maneuver after a relatively short time in service . 

While we had been concerned in the past with the problem of 
fracture of these high strength materials , as a result of the 
aforementioned test experience, a rigorous fracture mechanics 
test and analytical approach had not been applied. As a result 
of this flight failure an extensive fracture mechanics program 
was initiated and has progressed a long way toward understanding 
and quantifying crack propagation and brittle fracture phenomenon. 
Some of these actions taken on the F-lll will undoubtably benefit 
and be reflected in future programs . 

Figure C-23 shows the elements which essentially constitute 
the service life integrity program for the F-lll as modified to 
include fracture mechanics considerations. Involved in quantifying 
the Fracture Mechanics inspection interval calculations is the 
prediction of crack growth rates and critical crack sizes as 
indicated. This required a considerable test and analysis program 
as an adequate test data base and analytical procedures to 
accomplish these analyses did not exist. The basic elements 
of this program are shown in Figure C-24. Essentially, the 
procedure starts with the service usage spectrum used for fatigue 
analysis with the additional consideration of the temperature 
and chemical environment. As it is not practical to perform 
an analysis for every part of the airplane, it was necessary to 
isolate the critical parts which, if they fail, would cause 
catastrophic failures . In some instances the criticality of 
parts could be determined by simple examination. However, in a 
large number of cases extensive failure analyses were required. 

Flaw growth models were also required that were representative 
of the structure and correlated with spectrum test. It became 
apparent that there was a considerable difference between 
spectrum loading and constant amplitude cyclic loadings on 
crack propagation in steel and this type testing was included in 
the specimen test program. Another unique procedure adopted for 
the F-lll was to proof test airplanes on a production basis and 
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this was made an integral part of the fracture control program. 

Also, a statistical risk assessment analysis was performed which 
was useful in establishing the relative criticality of important 
structural part. 

Figure C-25 illustrates the basic proof test concept. The 
premise is that the test will demonstrate that a crack greater 
than a critical depth will not exist at a given stress level 
and temperature. Further, in actual operation, the airplane 
will in all probability experience some lesser stress level and 
at a higher temperature than the proof test values . Advantage 
can be taken of both the lower stress and the fact that steel 
parts have a considerably reduced fracture toughness level at a 
low temperature to provide a margin as illustrated which can be 
converted to flight hours for a crack, if present, to propagate 
to critical size. In essence, the procedure is simple however 
there are a considerable number of problems involved in the 
practical execution. Figure C-26 is a superimposed photograph 
of an F-lll airplane subjected to positive and negative loads 
in the cold test chamber. As previously mentioned, the assumption 
is that any cracks which may exist in the structure are below 
their critical crack size for the conditions tested or catastrophic 
failure would result. 

The basic fracture mechanics data program conducted for the 
F-lll involved not only Convair but also a number of other test 
laboratories participated, including those at Boeing, Battelle, 
Aerospace Corp., NASA, AFML and AFFDL. A large number of tests 
were required to isolate the variables shown in Fig. C-27. Close 
to a thousand specimens of D6AC 220-240 heat treat steel were 
run in this basic data program. Figures C-28 to C-30 illustrate 
some of the types of specimens and typical test machines which 
were used to obtain this data. 

An unforeseen difficulty was encountered in establishing the 
variation of Kq c with temperature which is required to permit 
prediction of critical crack size. It was found that D6AC did 
not have a single Kq c variation with temperature as illustrated 
by Fig. C-31. This departure from the expected situation was 
determined to be a function of the cooling rate during the heat 
treat quench from a material temperature of 600°F down. Values 
of Kq c at room temperature were found to vary from 40 to 95 
depending on this quench rate. It was therefore necessary to 
determine the heat treat histories of all the parts installed 
in the completed aircraft, and to take into account the fracture 
toughness value that would produce the shortest or most conservative 
Inspection interval. It should be noted that the other material 
properties: impact strength, elongation, yield strength and 

ultimate strength, were within specifications values and did 
exhibit this variation. Also, in spite of the variability of 
fracture toughness no difference is discernible in crack 
propagation rates . 
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The data plotted on Fig. C-32 is typical of the data derived 
from the test program and illustrates the relative influence of 
environment on crack growth for constant amplitude WOL type 
specimens. The Ak range for the data presented is of the order 
of 10 to 60. Similar data from the complete test program have 
been assembled and will be published shortly by the Air Force 
Material Lab. 

As previously noted, it became apparent during the course of 
the program and from evaluations of data available that the 
constant amplitude test specimen program data was not consistent 
with results from spectrum tests. A considerable retardation 
effect was evident from these spectrum loaded tests depending 
upon the order of the applied loading and environment. To resolve 
this difference an extensive spectrum/environment effects program 
was initiated as summarized in Fig. C-33* A baseline program 
was run with certain conditions held constant as noted and variations 
evaluated against this baseline. There was a total of 109 
specimens in this program and again a number of laboratories 
participated in addition to General Dynamics. Figures C-34 and 
C-35 show some of the typical test set-ups used. 

To establish an analytical correlation, a mathematical model 
was developed by Dr. Wheeler of Convair, as shown on Fig. C-36. 

This model accounts for the crack retardation which takes place 
when a large initial load is followed by subsequent smaller loads. 

The derivation of this equation has been published and is 
available in the engineering literature. The significance of 
the retardation effect is shown in Fig. C-37. The particular 
test illustrated was run to a 5g maximum load and a mission 
developed spectrum in a JP-4 fuel environment. The spectrum 
loads were applied in 58 random load levels. An analysis based 
on constant amplitude test data would predict that the crack 
would propagate to a .20” depth after 400 hours. The specimen 
as tested took 3?200 hours to progress to this depth. A prediction 
based on using the retardation approach previously discussed is 
shown for comparison. 

I would now like to discuss one of the specific aspects of 
the design problem today. In the past, fatigue analyses were 
performed and tests conducted on the assumption that the service 
life was a function of the time required to incubate and initiate 
a crack and to have it progress to failure. The current concept 
interjecting Fracture Mechanics starts with the assumption that 
there is a pre-existing crack. Figure C -38 is an artist f s 
rendition but it illustrates the obvious fact that the left-hand 
curves will produce an appreciably shorter life than the right-hand 
curve. It is also generally recognized, as noted on the chart, 
that there are a large number of factors involved in the development 
and growth of flaws. The net result is that the design task, if 
it is to take into account Fracture Mechanics considerations 
directed toward specific requirements, will be considerably more 
complex. 



In conclusion, I have summarized on Figures C-39 and C-40 
the Designers problem as it can be viewed today in regard to 
achieving adequate and safe service life. To cope with these 
problems, new methods and procedures need to be developed and 
integrated into the design process. 
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SPECTRUM/ENVIRON MENTAL EFFECTS PROGRAM 
06a c, 220/240 KSI 





APPROACH 









• ESTABLISH BASELINE DATA 

• CONSTANTS K | c Flaw. Spectrum, Material Form, Thickness, Unit Stress 

• 4 ENVIRONMENTS: Dry Air ReL Hum. JP-4 Fuel. Dis» Water 

• 2 or More Crack Growth Curves/Environment 

• EVALUATE EFFECTS OF 

• SUSTAINED LOADS 

• COMPRESSION LOADS 

• FRACTURE TOUGHNESS 

• MATERIAL FORM 

• SPECIMEN THICKNESS 

1 NUMBER OF TESTS ~ 

• GD SPECIMENS / FLAWS 

• TOTAL SPECIMENS _ 
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• STRESS LEVEL (Unit Stress) 

• SPECTRUM SHAPE 

• LOAD SEQUENCE 

• SURFACE FLAW SHAPE 

• FLAW TYPE 



. 48/77 
. 109 



Fig. C-33 
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Fig. C-37 
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PRINCIPAL FACTORS 



I INCUBATION 

II MICRO-MACRO CRACK DEVELOPMENT 
III CRACK PROPAGATION 



ABODE 
ABC 
A B-C-E 



FACTORS 



A - INTRINSIC MATERIAL PROPERTIES D MANUFACTURING PROCESSES 

B DESIGN STRESS LEVELS LOAD SPECTRUM E ENVIRONMENT 

C - DETAIL DESIGN 



Fig. C -38 
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C&S/GMST& 

• ACHIEVEMENT OF ADEOUATE SERVICE LIFE AT ACCEPTABLY LOW RISK IS DEPENDENT 
ON A LARGE NUMBER OF FACTORS, (some of which are beyond the Direct Control ot 
the Designer) MANY OF THE FACTORS WHICH MUST BE CONSIDERED ARE IN TURN 
SUBJECT TO A LARGE NUMBER OF VARIABLES. STATISTICAL ASSESSMENTS OF 
SERVICE LIFE AND RISK CAN BE USED TO ASSIST IN THE DECISION MAKING 
PROCESS; HOWEVER. WHAT CONSTITUTES ACCEPTABLY LOW RISK HAS NOT BEEN 
ESTABLISHED. 

• TO ACHIEVE DESIRED PERFORMANCE, INCREASING USE IS BEING MADE OF MORE 
EXOTIC MATERIALS AND MANUFACTURING PROCESSES 

• HIGH STRENGTH METALLIC ALLOYS 

•FILAMENTARY COMPOSITES 

•HIGH FATIGUE RESISTANCE FASTENER SYSTEMS 

•WELDING, ADHESIVE AND DIFFUSION BONDING 

• SURFACE FINISHING 



IN ORDER TO ASSURE THAT THE EXPECTED BENEFITS IN SERVICE LIFE ARE ACHIEVED 
THE DESIGNER MUST HAVE A MORE INTIMATE ASSOCIATION WITH THE MANUFACTURING 
AND INSPECTION OPERATIONS AND PROVIDE MORE SPECIFIC INFORMATION AND 
DIRECTIONS. Mt7r- 



Fig. C-39 



• THE CURRENT TREND TOWARD A DESIGN CRITERIA BASED ON THE ASSUMPTION OF 
PRE-EXISTING FLAWS AND A DEFINITION THAT FATIGUE LIFE IS BASED ON THE 
TIME A FLAW BECOMES OF DETECTABLE SIZE REQUIRES NEW KNOWLEDGE ON THE 
PART OF THE DESIGNER OF THE VARIABLES AFFECTING SERVICE LIFE INCLUDING 
WHA1 THE PRODUCTION MANUFACTURING PROCESSES WILL PRODUCE AND IN- 
SPECTION CAPABILITIES WILL FIND 

• TO AVOID THE PROBLEM OF CATASTROPHIC FAILURE IN MONOLITHIC STRUCTURE 
THERE HAS BEEN A TREND TOWARD CONSIDERATION OF FAIL SAFE DESIGNS 
THIS DESIGN CONCEPT HOWEVER PRESENTS A NUMBER OF PROBLEMS 

•PERFORMANCE DEGRADATION (Weight) 

• COST - INITIAL AND MAINTENANCE 
(Additional Piece Parts and Joints) 

• VERIFICATION BY TEST OF FAILURE MODES 

A FAIL SAFE STRUCTURE IS NOT FAIL SAFE UNLESS THE FIRST FAILURE CAN BE 
READILY DETECTED AND CORRECTED 

/*>rv. 77* - rfifis 
7 / 

Fig. C-40 
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SOME COMMENTS ON FAIL-SAFE DESIGN 



Walter S . Hyler 
Batt e lie -C olumbus 



Abstract: Tensile design properties are based on strength 

distribution curves with mean stress and standard 
deviation. No similar curves are available for 
fracture resistance. Data are presented to show the 
large scatter of K-]_ c , depending on slight processing 
variations as well as on location within the same 
sheet. A coefficient of variation indicates whether 
processing is well under control. Improved material 
characterization will be necessary for fail-safe 
design with thick, moderately thick, and thin 
structures — again requiring close interrelation 
between design and materials and processing. 



The talk by Mr. Dietz this morning was very impressive to 
me, probably not only because it was done so well, but also 
because it touched upon many concerns that I have relative to 
fail-safe or damage tolerant design. One thing which came out 
clearly was his statement about the need for positive interaction 
between the designer and the materials and process engineers, 
since in damage -tolerant design of high-performance systems, we 
are concerned with fracture and fatigue-crack propagation for 
which analytical methods still are being developed and for which 
optimum materials processing is necessary. This is where I 
wanted to start my discussion and what I wanted to amplify on 
because I believe that it really is a fairly critical point. 

In the old days — and I say this with a smile because I really 
don’t know about structural design in the old days — it seemed 
we were interested in ultimate strength, in limit load, and in 
developing positive margins, and then we would go on to the 
next design problem. With our high-performance airplanes, we 
have more complexities . We may still be computing ultimate 
load, limit load, and positive margins, but with damage tolerance 
we are also concerned with establishment of minimum detectable 
flaw sizes, crack propagation by fatigue, establishment of 
inspection intervals and useful life, and the strength of flawed 
structure . 

For handling ultimate and yield load design calculations, 
we have learned to employ and have become comfortable with the 
use of design allowables based on statistically established minimum 
design properties. It is obvious that we have not nearly approached 
that point yet in terms of fatigue-crack propagation and fracture; 
but as we evolve design concepts, such as fail-safe or damage 
tolerance, then I think that we will have to give some attention 
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to the establishment of minimum design allowables for these 
behaviors . 

Both fatigue-crack growth and fracture are sensitive to 
geometric factors in component geometry, to composition and 
structure of the material, and to processing details in the 
fabrication operations. The measures of these behaviors, such as 
K c , Kj c , and da/dN versus AK have grown out of the development 
of fracture mechanics as a stress -analysis tool and can be used 
in design analysis. In the discussion today, I make reference 
to only one of these measures, K^ c ; however, the philosophical 
implications also apply to problems associated with plane-stress 
fracture and fatigue-crack propagation. 

While Kj c has historically been considered a constant for a 
material under a plane-strain stress state, this is an over- 
simplification when one considers the reality of materials in 
structural components. If one simply considers a material in a 
product form, such as plate, processed by procedures reasonably 
well under control, we know from countless tensile tests that 
there is a variation in tensile properties of 15 to 40 ksi, 
depending upon the material and its strength level. Similarly, 
one can expect the same material to exhibit a variation in Kj c 
of some appreciable, but generally unknown, magnitude. Now 
consider the same thick plate material fabricated into a useful 
but complex piece of structure with distinct changes in thickness 
and plan- form and finally heat treated to the desired strength 
level. If the material is quench-rate sensitive or sensitive 
to some other processing procedure, one can expect that the 
variability in Kj c from location to location may be appreciably 
greater than in the prior case. A design philosophy such as 
damage tolerance that is based in part on fracture toughness 
considerations is not on too solid a footing unless there is a 
realistic appraisal of this variation. 

Figure D-l provides some rationale for the above statement. 

In this figure are shown for three generic materials (with their 
representative F tu levels), the critical surface crack length 
associated with various Kj c levels. If one decides, based on 
limited testing of simplified shapes that "reasonable" Kj c 
levels should be 60, 60, and 25 ksi inch (for steel, titanium, 
ahd aluminum, respectively) , and if the real material in a complex 
component shows variations of -30 percent or more (which is not 
unlikely), the possibility exists that a flaw will grow to 
instability long before it can be detected with high probability . 
This is a consequence that may accompany inadequate determination 
of minimum Kj c values. For example, for the steel alloy in 
Figure D-l, the carck length is shown to be 0.l6 inch. However, 
if the distribution of Kj c in real parts can vary by -30 percent, 
application of the limit load stress might result in failure 
with a surface crack of only 0.07 inch; hardly a detectable 
crack with high probability. 
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For static properties, as stated before, the aerospace 
industry has become accustomed to the use of statistically based 
design allowables, such as the A and B values in MIL-HDBK-5. 

I would like to review briefly some features of A and B values, 
since some of the ideas are instructive in considering fracture 
and fatigue-crack propagation. Figure D-2 shows the analysis 
of tensile yield strength for 7075-T6 sheet. 

In this figure are shown two bell-shaped distribution curves 
based on an analysis of test data. The solid curve was obtained 
from test samples sectioned from one sheet. The dashed curve 
came from a large number of quality control tests on many lots 
of the alloy. It is seen that in either case the properties 
fall in a broad range, and for this collection of data the 
single sheet data covered over half the range obtained from the 
multilot test data. It is from this type of analysis that the 
aluminum industry developed the concept of A values as a minimum 
design mechanical property. Thus, the A value is a minimum 
strength above which it is expected that 99 percent of all 
future production will lie with a confidence of 95 percent. I 
have shown on the figure what I terms an A 1 value that represents 
a maximum strength value, below which 99 percent of all future 
production will lie with a confidence of 95 percent. 

For this alloy, the "process capability" is such that 
98 percent of all production is expected to lie between A and A’. 
The term "process capability" implies that for a given production 
process schedule, there will be a recognizable distribution in 
strength properties, definable by a reasonable population of 
test data. The range of properties reflects acceptable limits 
on composition and structure and on all the controls utilized 
in each processing step. 

When we consider fracture as exemplified by Ky c , it may be 
that for small quantities of a given material, hear treated 
carefully and consistently, that Kj c will be a reasonably constant 
value. If one can convince one’s self that such values represent 
the material in a complex structure, it (Kj c ) provides a good 
engineering tool to employ in damage tolerant design. However, 
many modern aerospace structural materials are sensitive to 
various states of processing so that unless one knows the "process 
capability" of a material with regard to fracture, one may be 
led to unsafe design conclusions. The next several figures 
and accompanying discussion amplify this point. 

Figure D-3 shows the distribution curve obtained from 
quality control data on current production Ti-6Al-4v mill- 
annealed plate. The statistical analysis resulted in the 
A, A’, X, B and B T values indicated. One concludes from the 
analysis that the process capability of this alloy is such that 
98 percent of expected future values will lie between 118 ksi 
and 146 ksi. 
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Figure D-4 shows the relationship between F and Kj c for 
the same titanium alloy in about the same thickness range. In 
this figure, each horizontal line, vertically tic marked at 
the ends, marks the minimum and maximum Kj c value observed for 
a given plate with the appropriate TYS. Two or more tests 
were conducted for each plate. The excessively large scatter 
is disturbing since the material is essentially that which 
can be purchased according to the confines of present military 
specifications and, as such, corresponds reasonably well in 
tensile properties to the material shown in Figure D-3. 
Consequently, the ordinate scale on Figure D-4 is tic marked 
to indicate A', B' X, B, and A values from Figure D-3. 

From data, as shown in Figure D-4, one must establish a 
representative Kj c value for use in damage -tolerant design 
considerations. There are several possibilities for this 
selection: 



(1) Assume a typical value. A natural selection would 
be a Kj c value associated with t he me an strength, 

X; thus, a Kj c of about 65 ksi -/inch. 

(2) Establish a trend line, such as the downward sloping 
solid line in Figure D-4, and select a minimum Kj c 
value associated with the A 1 value; thus, a Kj c of 
about 42 ksi inch.* 

(3) By statistical analysis, using regression techniques 
and introducing probability and confidence (not 
necessarily 99? 95) ? establish a minimum curve and 
select a minimum Kj c value associated with the A f 

value_. Such an approach would yield a Kj c of 35 

ksi inch, or less. 

(4) The fourth alternative is to lump all of the data 
and compute by statistical techniques the X and s 
associated with the data and a minimum value based 
on some agreed-upon probability and confidence. A 
Kj c value about the same as in Alternate 3 would 
be anticipated. 



Neither Alternates 3 nor 4 provide a design value for Kj 
that would excite the designer (based on this data collection; 
since this results at a limit load stress of F-^ u /l.5 in the 
need to confidently find surface cracks less than about 0.25 
inch according to Figure D-l. Alternates 1 and 2 appear less 



* The A 1 value is chosen since the TYS distribution indicates 
that this is an expected value for this alloy. 
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desirable, since they ignore the distinct probability that 
substantially lower values of Kj c will actually be present in 
the material (particularly for Alternate l). There is some 
belief that for fracture critical components the assumed 
Alternate 1 value can be screened with quality-control tests. 

This rationale appears to be potentially erroneous if the 
distribution of Kj c values in a single plate shows a range of 
expected values nearly as broad as that from a large sampling 
of plates -- along the lines suggested for TYS in Figure D-2 . 

It should be stated that other information than shown in 
Figures D-3 and D-4 (relative to composition and microstructure 
and their influence on Kj c for this alloy) suggests that the 
extensive scatter may not be real for this alloy, providing 
some further examination of process control is done in order 
to sort out what contributes to the variability and how process 
controls can be modified to lessen variability. This is the 
essential point that Mr. Dietz was addressing in promoting 
much closer interaction between design people and materials 
and processing people. 

Another material of considerable interest these days is 
D6AC, a modification of 4340. Figure D-5 shows the distribution 
curve for yield strength for this alloy based on a large sampling 
of producer and us£r quality control data. It was a normal 
distribution with X at 2l4 ksi. The process capability was 
such that 98 percent of future production would be expected 
to fall within the range 200 ksi to 228 ksi with a confidence 
of 95 percent. 

Figure D-6 begins to delineate the real-life situation 
for this alloy with regard to fracture, or Kj c . This is a very 
busy figure that requires some preliminary orientation. The 
rectangular border represents the boundary of l6 different 
plates of D6AC (2 feet by 3 feet) all processed similarly by 
General Dynamics/Fort Worth and identically heat treated 
according to a procedure that I have identified as heat treatment 
A. Each plate had been laid out to provide a variety of specimens 
for tensile tests, fracture toughness, etc. On Figure D-6, 
each of the sixteen plates is identified by a distinct symbol. 

The symbols on the drawing represent the approximate location 
in each plate from which a fracture specimen was taken (usually 
more than one fracture test was conducted and Figure D-6 contains 
all of the data). The numerical values adjacent to each symbol 
represent the observed Kj c values. 

Within the circle at the lower right-hand corner of the 
figure are data for six different plates. It is seen that Kj c 
for the pl ates a t this confined location ranges from about 59 
to 86 ksi yinch. Within the circle at the lower left-hand corner 
also are data for six plates, where some plates in this location 
duplicate those in the right circle. For this second circle, 
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the range in Kj c is from about 55 to 91 ksi ’/inch. Where plates 
are represented in both circles, a plate with Kj c on the high 
side of the range in the right circle may not be similarly 
ordered in the left circle. In fact, if one were to draw a 
number of circles at various other locations on the plate 
plan-form and examine the details of the data within each circle, 
comparing the data with that in other circles, one would conclude 
that with this particular heat treatment a fairly large variation 
in Kj c can be expected within a plate and among the many plates . 
Detailed perusal of the figure shows this range to be from 
slightly less than 50 ksi * inch to slightly more than 

90 ksi ^ inch. 

Figure D-7 shows the same fracture -toughness data plotted 
as a function of TYS, with the A ! , X, and A values from Figure D-5 
tic marked on the ordinate. Of the l6 plates, 11 had accompanying 
tensile test data, so that the horizontal lines represent the 
plate tensile yield strength; the tic marks at the ends are the 
maximum and minimum Kj c values in the plates from two or more 
tests. The lowest horizontal line on the figure is for the 
five other plates, where TYS is an assumed, but reasonable, 
value. It is evident from this display that the heat-treat 
process capability with regard to TYS is quite satisfactory. 
However, one concludes that although the fracture toughness 
information also is consistent, the inordinate scatter in results 
may prejudice the utilization of the material since the capability 
of heat-treatment A would yield a design allowable for Kj c of 
approximately 37 ksi inch (for 99> 95 on probability and 
confidence). 

Figures D-8 and D-9 illustrate a happier story. Figure 
D-8 shows Kj c data from eight plates of D6AC that were identically 
heat treated, but in a different way than the previous l6 plates. 
This heat treatment, I have identified as heat -treatment B. The 
plotting scheme in Figure D-8 is the same as for Figure D-6. 
Examination of the somewhat fewer data in Figure D-8 shows 
(l) an encouraging uniformity in fracture toughness within a 
plate and among the plates, and (2) a substantial increase in 
fracture toughness. The range in Kj c values is from about 

91 to 102 ksi 1 inch. 

Figure D-9 shows the Kj c values plotted against TYS as in 
Figure 7; however, there were tensile data for only two of the 
plates. The middle line at TYS of about 220 ksi is for the 
remaining six plates. Since so few tensile data were available, 
it is difficult to say any more than that there appears to be 
a greater spread in TYS associated with heat-treatment B than 
for A. More important, however, while the fracture test results 
for D6AC with heat -treatment A suggest a possibly severe sensitivy 
to nonuniform quench rates along the plan-form and from plate 
to plate, heat -treatment B suggests that its process capability 
is compatible with achieving high and uniform fracture toughness. 
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Not only that, but a designer familiar with the use of statistical 
design allowables for static strength would have a much more 
comfortable regard for an "A" value for fracture toughness of 
about 83 ksi ^inch to which manipulation of these data lead 
one. 



This type of materials and processes research, which has 
been conducted at General Dynamics/Fort Worth, interfacing with 
the stress and structures people is the way that confidence will 
be built into the use of the damage tolerant design concept. 

Figure D-10 is illustrated to recap some of the statistical 
measures that were employed in preparing several of the other 
figures . Information shown for the three materials and two 
strength attributes are coefficient of variation, C; average 
strength, X; and standard deviation, s. As one examines the 
right-hand column (s), it is immediately evident that the 
standard deviation for fracture toughness of heat-treatment A 
for D6AC is excessively high, certainly suggesting that processing 
is yielding an intolerable variability in results. On the other 
hand, heat-treatment B exhibits an s value even less than that 
for TYS, when processing has been examined and developed for 
the strength attribute of importance. 

In the column for coefficient of variation, which is a 
measure of dispersion, s, normalized by the average value of 
strength, several features stand out. First, the C value for 
Ti-6Al-4v alloy for TYS is in excess of 50 percent higher than 
the comparable value for the other two materials. This suggests, 
based on this and other information, that process control for 
this alloy probably can be improved. This process control, in 
turn, may significantly alter the fracture toughness display of 
Figure D-4. Recent work at North American Rockwell relative to 
the B-l is beginning to bear this out. Finally, the almost 
order of magnitude difference between C values for TYS and 
fracture toughness (A heat treatment) for D6AC reinforces the 
idea that process development and control for fracture toughness 
was needed. 

This discussion has been an attempt to quantify, by examples, 
my thoughts and those expressed independently by Mr. Dietz and 
others at this meeting that the development of the damage tolerant 
design concept presents a challenge in the aerospace industry 
that encompasses design engineers as well as materials and 
processing personnel. The challenge is not only in developing 
and understanding the design concepts utilizing fracture mechanics. 
Equally important is to recognize that the mechanical behaviors 
associated with damage tolerance, fracture toughness, and 
fatigue-crack propagation are structure and process sensitive. 

This sensitivity will require perhaps an order of magnitude 
increase in materials and process research, development, and 
characterization on aerospace systems contracts in order to assure 
that the material in future structural components will have high 
and uniform fracture toughness. 
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FIGURE D-1 



CRITICAL SURFACE-CRACK LENGTH VALUES FOR SEVERAL GENERIC 
MATERIALS WITH ASSUMED K iC VALUES 
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ALCLAD 7075 -T6 Sheet 

FIGURE D-2. DISTRIBUTION OF TENSILE YIELD 
STRENGTH VALUES FOR ALCLAD 
7075-T6 SHEET 
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FIGURE D-3. DISTRIBUTION OF TENSILE YIELD 
STRENGTH VALUES FOR TI-6AI-4V 
PLATE 




FIGURE D-4. RELATIONSHIP BETWEEN TENSILE YIELD STRENGTH 
AND K Ic FOR TI-6AI-4V ANNEALED PLATE 
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240i— 



I90 l 



D6AC plate 

(Nominally 220-240, ksi) 




FIGURE D-5. DISTRIBUTION OF TENSILE YIELD 
STRENGTH VALUES FOR D6AC 




FRACTURE TOUGHNESS DISTRIBUTION IN SIXTEEN PLATES OF D6AC 

FIGURE D-6 
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Fracture Toughness of D6AC Plate 

FIGURE D-7. RELATIONSHIP BETWEEN TENSILE YIELD 
STRENGTH AND FRACTURE TOUGHNESS 
OF D6AC PLATE, HEAT TREATMENT A 




FIGURE D-8 
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FIGURE D-9. RELATIONSHIP BETWEEN TENSILE YIELD STRENGTH 
AND K lc FOR D6AC PLATE, HEAT TREATMENT B 



ALCAD 7075-T6 

Tensile Yield Strength — 

Ti6AI-4V 

Tensile Yield Strength — 

D6AC Steel (220-240 Ksi) 
Tensile Yield Strength — 
Fracture Toughness, A— 
Fracture Toughness, B — 
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FIGURE D-10. STATISTICAL MEASURES FOR THE THREE ALLOYS 
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IMPACT OF PROCUREMENT PRACTICES 
ON C-5 STRUCTURAL DESIGN 



W. T. Shuler 
Lockheed-Georgia 



Abstract: Contractual factors which affected the structural 

design of the C-5 are analyzed and evaluated, including 
guaranties on performance, low weight empty, and crack- 
free fatigue life as well as fixed price contract and 
program for concurrent development and production. No 
revolutionary change in procurement practices is recom- 
mended, but areas of possible improvement are indicated 
and discussed. 



Only the abstract is available . 
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STRUCTURAL DESIGN CONSIDERATIONS FOR 
A SPACE SHUTTLE 

F. F. W. Krohn 
General Dynamics - San Diego 



Abstract: Details of structural arrangement and thermal protective 

system for a space shuttle booster are shown and 
corresponding design conditions are given including 
thermal expansion, creep, shock impingement, acoustic 
environment. Design considerations for high -temperature 
materials, and structural features for components 
incorporating a safe-life or a fail-safe approach are 
discussed — indicating a new order of complexity 
compared to aircraft design. 



I would like to present to you design considerations for a 
space shuttle booster. The design requirements on space shuttle 
vehicles are a unique combination of the design requirements for 
aircraft and rocket launch vehicles . This is something brand new 
and the combination of these requirements will impose on us quite 
a number of new problems in materials and design. 

For those who might not have followed the space shuttle 
project, there have been four teams engaged in design studies. 
McDonnell-Douglas has a design effort on the booster as well as 
on the orbiter in Phase B. North -American Rockwell and General 
Dynamics Convair have a split in tasks, with us at General 
Dynamics doing the booster and North-American doing the orbiter. 

Then there is a team of Grumman and Boeing and the fourth is one 
company again -- Lockheed. 

The objective of the space shuttle system is to put payload 
cheaply in orbit with re-usable vehicles. The different versions 
which have been studied accomplish this with marked difference 
in cost. Some of the systems throw away tanks which weigh up 
to 60,000 §. Payload cost in orbit varies from $75 for fully 
re-usable to $200 plus for partially re-usable systems. 

I will address myself to a system which mounts the orbiter 
parallel to the axis of the booster --a polar orbit design 
mission with a payload of 40,000# and an orbiter with two engines 
requiring a staging velocity of 10,800 ft/sec. This results in 
the most difficult booster and this vehicle system was studied 
in depth. However, we had a re-direction as we found out rather 
lately, through side studies, that it would be much more advantageous 
to have three engines on the orbiter. This brings the staging 
velocity down to less than 8000 ft/sec, even for the polar missions. 
As stated I will, however, address myself to the particular system 
with 10,800 ft/sec staging velocity. 
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The approximate lift-off weight on the pad, with the orb iter 
mounted, is slightly in excess of 5 million pounds for the 
combination — a rather staggering weight. As far as the booster 
is concerned, our lift-off weight is 4,188,000#. The landing 
weight is 638,000#. The rest is propellants. 

The vehicle is really a huge tanker with 12 rocket engines 
mounted at its base. To give you some idea about the dimensions, 
the booster has a wing span of 144 feet and a total length of 
256 feet. For cruise back it has JP propellants of approximately 
144,000#. It has an ascent propellant weight of 3 5 382,000#. 

Of the total vehicle weight, essentially more than half is 
oxidizer. 

Now let us get a little bit into the description of this 
vehicle system. It takes off vertically. The orbiter is 
connected with a reversible link system which is sized in such a 
fashion that the orbiter can be ejected even with the orbiter 
engines dead. This is accomplished by the thrust on the booster. 

In normal operation the orbiter has its thrust run up to 
approximately 50$ at time of separation. There is still a very 
large force in the horizontal direction on the linkage system. 

After the orbiter has been separated, the vehicle will 
assume an angle of attack of approximately 6o° and spend its 
kinetic energy very rapidly. The whole heating cycle is exceedingly 
short and the heat-up is very steep. Here, you will see, we have 
very severe implications for structural design. Everything on 
the outside will be hot and any inside structure will just lag in 
temperature. The vehicle, during the time of re-entry, is 
controlled by a set of reaction controls because the tail is 
fully ineffective and also the wings are not very effective at 
this time. 

We have 12 jet engines in this vehicle. They are deployed 
and run up one after the other following re-entry. The last 
engine will have run up approximately two minutes after the first 
has been deployed. The vehicle then will cruise home or it will 
cruise to the next airfield. The vehicle has the capability just 
like some of the orbiters to ferry back to the launch pad. 

In structures arrangement there is a very large difference 
between the design requirements for 10,800 ft/sec staging velocity 
and a vehicle staging with less than 8000 ft/sec. A 10,800 ft/sec 
vehicle requires a substantial thermal protection system (TPS). 

An 8000 ft/sec vehicle can be built around what we call the heat 
sink principle. Here temperatures are controlled by allocation 
of sufficient mass in the surface. Use of heavy aluminum gauges 
will reduce temperatures to 300°F over most of the vehicle 
surface . 
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Now let us look at the structural arrangement shown in Fig. F-l. 
The vehicle has a thermally protected backbone structure consisting 
of thrust structure, LH 2 tank, intertank, LO 2 tank and forward tank 
extension. All major vehicle loads are introduced into this thermally 
protected core. 

The wing is link-attached with vertical and drag links. Once 
we fuel the LH 2 tank, the tank wall will go to approximately -100°F 
and shrink very substantially while everything around it will stay 
at room temperature. So, all supports have to be statically 
determinate . 

The orbiter attachments are backed up by two large bulkheads 
which are essentially external in the region of the LH 2 tank and 
one very deep forward bulkhead which is inside the LO 2 tank. This 
forward support takes the brunt of the loading. 

Figure F-2 shows the heat shield which shrouds the body. It 
is composed of large semi structural elements. We did not follow 
the usual route of having TPS panels of 2 or 4 feet square . Instead 
we have large panel shells with slip joints and a horseshoe element 
directly attached to the wing because the temperatures of the 
upper wing surface and this shroud are approximately the same. 

One must make sure to get compatible expansion. The best way to 
enforce this is to attach the heat shield to the wing directly as 
a root web. All other shell elements are supported in the center 
and expand fore and aft with respect to the substructure. 

The great advantage of this arrangement is that it reduces 
the potential leak area in seals and slip joints to less than 
1000 ft length compared to some miles in a conventional panel 
system. This makes it possible to control the containment of 
purge gas. There is a purge envelope over the LHp tank separated 
by a bulkhead from the purge cavity over the L02 tank. Both 
cavities are filled on the launch pad with dry nitrogen. 

In up-flight, we bleed off the purge gas to avoid large 
internal pressures on our heat shield. Just very shortly before 
staging, the bleed-off vents are closed and kept closed during 
the time of maximum heating. We will have some loss of purge gas 
during this time without any doubt. We have a self-imposed spec 
of permissible leakage area (not to exceed 350 square inches) and 
this permits us to go through this environment with a quite high 
degree of assurance that we will not get hot plasma into the 
purge cavities. After we have suffered through the re-entry, the 
tank pressure will be reduced and the vents will be opened to 
take air on board for pressure equalization. So much for the 
general description and operational aspects of the vehicle 
effecting the structure . 
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The design criteria shown in Fig, F-3 indicate for the launch 
mode an ultimate factor of 1,4 x limit and for the aircraft mode 
an ultimate factor of 1.5 x limit. Buried in this arbitary 
limit-to-ultimate factor are 80 million dollars . That is the cost 
to conduct a full-scale separate static test. 

Now, what are we really after? We are after a vehicle which 
is capable to take limit loads at the end of its useful structural 
life. We have proposed to the contracting agency to leave these 
factors in for design but to drop the whole static test program 
except for development testing. Instead, we would go through four 
lifetimes of operational flights and then subject the structure to 
1.15 times limit load. We feel that this is a much more useful 
type of testing. Arbitrary design criteria which we have set up 
with the ratio of yield -to-ultimate factor on one outdated 
aluminum alloy in mind most certainly are suspect in our time 
and age. 

The tanks , which compose a very large portion of the structure, 
are not really designed by these external load factors. They are 
designed by fracture mechanics or, to put it another way, by proof- 
testing requirements . The tests are conducted with a proof 
pressure which precludes the presence of a crack which could grow 
to critical size with actual operational pressures and projected 
crack growth during 150 flights. This imposes a very severe burden 
on the materials community because now we really need to know 
crack growth rates and cannot be content anymore with K^ c alone. 

All our gages are thin enough to be neither plane strain nor 
plane stress, but something in between. And here we have a very 
substantial lack of data, even on the 2219 material which we have 
selected and which is excellent for the application. 

One of the new criteria coming in is creep. This is a wide 
open field. We have limited our creep to .2 % plastic deformation. 

We do not know if this is right because we don't know what really 
happens with a panel that has experienced this much creep. One 
could have panel flutter. One also has steadily changing conditions 
as far as overall dynamic behavior of the structure in flutter is 
concerned. We have designed around many of these problems, just 
to be on the safe side. 

Figure F-4 shows peak limit load intensities and the load 
envelope of the vehicle with 25 different loading conditions. 

As you can see, not much is designed by the aircraft mode of 
operation, mostly localized structure only. Figure F-5 shows that 
the tanks are designed for safe life and only a relatively small 
portion of the structure is designed for fail-safe criteria. 

We made a valiant attempt to get fail-safe tanks and looked 
into crack stoppers as they are presently employed on commercial 
jet fuselages. We found that they would have to be at a prohibitively 
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close spacing of approximately 4^-". We were quite -uncomfortable, 
as aircraft designers always are, with all this safe life 
situation. 

Then, by fracture mechanics analysis, we found to our delight 
that the tanks will leak long before we get to critical crack 
size. We really could fly with a subcritical, leaking crack on 
quite a number of missions before it would become critical. We 
have to make very sure that we install sensors in the purge 
cavities to find out if we have somewhere a slow leakage. This 
should warn us and we then could take a closer look at the tank 
wall. 



Figure F-6 shows the structural backbone of the vehicle with 
thrust structure, LH 2 tank, intertank, LO 2 tank, and forward tank 
extension. Orbiter support points as well as landing gear 
attachments are shown. A heat shield is mounted approximately six 
feet away from the rocket nozzle exit plane. Before we go into 
these components and their design logic, let us have a look at 
the crew compartment. 

Figure F-7 shows the structure of the crew compartment which, 
however, is not designed to structures requirements at all for a 
very unique reason. Severe noise levels caused by the captured 
shocks between booster and orbiter noses require this component 
to be designed for noise suppressions, e.g. with heavy skins. 

The crew compartment and the electronic compartment behind it 
are suspended from the outer heat shield shell which will expand 
substantially during heat-up in re-entry. The shell is conventional 
aluminum alloy construction. We have fused silica glass windows 
and there is a local area around them which is designed to 
thermo-structural requirements. The side enclosures can be swung 
open and the crew can eject out to both sides. This is required 
since the orbiter is mounted on top. Seats can be swiveled for 
vertical and horizontal flight. 

We have stringers, very few of them, on the inside and the 
frames are on the outside. The whole enclosure is enveloped with 
low-density fiberglas insulation and l" dynaflex over it to maintain 
the temperature environment in the compartment. 

Figure F-8 shows the forward tank extension with nose gear 
support and a large JP tank located here for stability during 
re-entry. The forward segment of the heat shield is supported 
here with two links and guide rollers. When we re-enter, the heat 
shield which is bolted to the sub-structure at the rear end of 
the lox tank, expands at this point approximately 6" forward. 

Tank extension construction material in the forward portion is 
2024. In the aft portion it is 2219 3 principally for compatibility 
with the wall of the lox tank which will see temperatures of 
-320°F. 
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Figure F-9 shows the lox tank which is made of 2219 aluminum 
and designed principally for fracture mechanics considerations. 

The nose gear loads do not tax this structure very much at all 
and there is a minimum amount of stiffening. We have integral T 
stiffeners longitudinally and truss-type frames. The reason for 
not going to a web-type frame is, of course, that the tank shrinks 
and we had to tailor the stiffness of the frame very carefully 
in order to prevent large pull forces on the tank stiffeners in 
chill down. The rather massive bulkhead at the orb iter forward 
attachment was mentioned before. 

All fittings are designed of two elements. Why not three for 
fail-safe? The reason is that we always would have covered one 
of the elements and therefore could not have inspected one of the 
elements visually. 

The lateral load on the forward orbiter attachment is 1.25 
million pounds limit and also the vertical load is very substatial 
but, nevertheless, all this does not design the structure here 
because stiffness requirements are critical. We had to meet a 
natural frequency with the orbiter mounted on top of approximately 
.8 cps . We made .9 cps after many trials and many computer runs. 

No large thermal stresses are encountered on a lox tank 
because the whole structure system will cool down simultaneously. 

We are definitely working in the mixed mode as far as fracture 
mechanics is concerned. Tank walls are approximately l/8" 
in the upper portion. There are also quite a number of baffles 
mounted in the tank. 

Figure F-10 shows the intertank section. It connects the 
LO2 tank with the LH2 tank. It is crammed full with equipment. 

Again we are dealing with an aluminum structure, local reinforcements 
in titanium, and here, fortunately, we can go inward and get our 
stiffness by depth. So, no advanced high stiffness materials are 
employed . 

The canard and the orbiter drag link are attached in this 
region. The all-movable canard is streamlined during re-entry 
since reaction controls are used. This effectively eliminates 
temperature differences between upper and lower surfaces. Regarding 
the critical orbiter connections we are becoming quite cautious 
and are toying with the idea to subject any of the critical 
orbiter connecting elements to proof loads for qualification. 

Figure F-ll shows the LH2 tank, made of 2219 aluminum, 
approximately 120 feet long and 33 feet in diameter. On the 
outside of the tank we have the frames, including the orbiter 
aft attachment bulkheads . 
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These two bulkheads experience their main load at the moment 
of separation but, interestingly enough, the exceedingly turbulent 
flow around these vehicles forced us into the ultimate of stiffness 
design on the frames because otherwise we could probably have 
fatigued this area half-way through the first flight at the point 
where the stiffeners join the frames. Whereas we quite succeeded 
in meeting the overall natural frequency requirements for the 
combined booster and orbiter with aluminum frames in this location 
here, we now had to beef up the caps with beryllium for local 
stiffness . 

Of course, we could take other materials here. It is beryllium 
because its price has come down substantially and we laminated it. 

Even if we should have a crack in one of the laminations we still 
do not lose our stiffness because a very localized area would be 
effected. Of course, we could have taken another route by lowering 
the height of the stiffeners joining the bulkhead here but this 
would have resulted in a substantial weight penalty. 

Figure F-12 shows the landing gear support structure. Essentially 
it is a wheel well, structurally fully enclosed. Vertical and drag 
links introducing the loads into bulkheads and into longerons 
which are integral with the tank wall provide an attachment system 
which permits the decrease in dimensions which takes place when 
we fuel the tank. 

But principally we selected this system because of the need 
for a meaningful drop test arrangement without involving too much 
of the vehicle. The arrangement permits drop testing the landing 
gear separately and with a concrete barrel on top of it because 
it is supported in a determinate fashion and loads into the 
structure can be determined accurately. The cost of testing 
requires very careful consideration and is quite important for 
the structural design of future large vehicles. 

Figure F-13 shows the wing-body-TPS arrangement. A drag 
brace taking the drag loads into the longeron of the tank walls 
is the only fore and aft restraint of the wing and the horseshoe 
heat shield attaches directly to the root rib here. Wing and 
heat shield expand from this attachment point. All the dimensions 
are steadily changing and there are slip joints to arrive at an 
expansion-compatible structures system. 

A metallic seal at the fore and aft end of the TPS horseshoe 
section is provided by a bellows. We have corrugated skins all 
over this vehicle because aerodynamic smoothness is of little 
concern. As a matter of fact, if one would start with a smooth 
surface on a high-temperature vehicle subjected to flash heating, 
after the first flight you would not have it any more . This 
necessary approach makes aircraft aerodynamicists shudder. 
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Figure F-l4 shows the cryogenic insulation system. Again , it 
is something rather unique. All the cryogenic insulation systems 
of the past have been one-shot systems but here we need long-time 
reliability because maintenance in a tank, which is 10 stories high 
and has 33 feet diameter, could be prohibitive. 

An external foam insulation system would not work because its 
specific heat is such that it would melt due to the high outside 
temperatures , in spite of the short heating times. So we need the 
heat sink of the structure to more or less protect the foam. We 
have a gas layer system without an inner liner, reconciling ourselves 
from the beginning with the fact that even with a plastic liner 
hydrogen would penetrate sooner or later during a 10-year life span. 

The unique polyphenyene oxide foam has a capillary system into 
which the hydrogen penetrates. A gas layer is formed which is 
kept in equilibrium by capillary forces at the surface. The system 
is structurally beautiful because it does not impose large shear 
forces on the adhesive joints. This is very important because it 
is a tough proposition to hold on a cryogenic insulation system 
at -421°F and we have more than a third of an acre of it. Besides, 
all the small columns of the system are so nicely stabilized 
against each other that a heavy man can walk on it. 

Figure F-15 shows the thrust structure. This is a fail-safe 
system with multiple load paths, partly with trusses, partly with 
shear webs providing a benign mode of failure which a truss does 
not give us. The basic structure is titanium, reinforced by 
boron -aluminum. Their coefficients of thermal expansion are 
close, 5*0 x 10"6 and 34 x 10“6, respectively. Graphite epoxy 
with a coefficient of 1 x 10“6 is not compatible with a metallic 
structure and we would have to make the whole article of graphite 
epoxy. 

The problem is also that boron epoxy and graphite epoxy are 
deficient in high-temperature applications . If graphite epoxy is 
heated to 350°F in the presence of moisture its strength will 
deteriorate. We have tested boron aluminum rather successfully 
up to 700°F. There is an additional consideration. You might 
have high temperature only for a short time but you need a certain 
heat sink capability to prevent the temperature from going up 
too fast. Lately we have done exceedingly well with boron and 
graphite polyimides which would have a substantial cost advantage 
but we were not quite sure of them at the time when we conducted 
this study. 

Let me point out the importance of weight savings. For every 
pound of advanced composite we save one pound of weight in 
stiffness critical areas. We attempt to put one pound of weight 
in orbit for approximately $75 > say $100. Let us look at the 
orbiter first. Without any change in sizing, with 100 flights 
at $100 a pound we generate a value of $10,000. Assuming an 
average 60$, payload factor, this makes it $6000 per pound or, to 
show definitely a profit, say $5000 per pound. 
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For this particular booster we need a 5 pounds saving to put 
one more pound of payload into the orbiter. This means for the 
booster one pound of weight saved is approximately $1000. It 
shows that advanced materials at a cost of about $350 per pound 
don f t have to frighten our community as long as we apply them in 
such an economical fashion. The installed cost of aluminum is 
anywhere between $35 to 150 per pound, depending on the quantity 
of production. As we are progressing into this new world of 
advanced materials, we will probably employ them in more complex 
shapes. Right now, the easiest way to employ them economically 
is just as reinforcements in localized areas. I am afraid we 
will always have a mix of many materials . The world is not 
built out of one material. 

Figure F-l6 shows the base heat shield which is very lightly 
loaded. Here we are really going all-out with exotic materials. 
There are beryllium truss systems, providing a quadruple load path 
and in a conservative fail-safe approach. The performance of these 
trusses on tests was just fantastic and columns with an L/ p 
approaching 3°0 are somewhat of an eerie sight. We have them 
ball- jointed to prevent lateral loading which shows what you can 
do if you watch the peculiarities of a material. 

The outer region of the bulkhead consists of corrugated 
rene 4l panels while the center panels consist of coated corrugated 
columbium. The reason is that the temperatures at the periphery 
are reduced due to air circulation, particularly on the launch 
pad. These are smaller panels, different from the heat shield 
arrangement on the rest of the vehicle. It is a slip-jointed 
system. 

Figure F-17 shows the wing arrangement, housing the engines 
with cutouts over a large portion of the structure. The acoustic 
environment of the engines with an output of around 172 decibels 
requires high stiffness surface panel construction in this area 
which merits every type of scrutiny we could put on it. The 
typical wing structure appears to be a throwback to old days 
with heavy concentrated load members of titanium and semi- 
structural covers. We have a fail-safe system of ribs and spars 
and corrugated surfaces with the corragation running in the fore 
and aft direction. 

The reason for this arrangement becomes apparent when we look 
at the wing structure in Fig. F-l8. The skin of Inconel 718 goes 
up to 1350°F and can expand and flex between the attachments at the 
node points while the heavy titanium spar cap has a maximum 
temperature of 300°F. We have to get used to thinking in terms 
of compatible heat-up because a panel could quickly deform to an 
unacceptable level and move into a critical panel flutter mode. 
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Figure F-19 shows the vertical stabilizer which consists of 
conventional, integrally stiffened type of titanium construction. 
The thermal environment is rather mild because the vertical surface 
is shaded during re-entry. Only the leading edge is heat-sinked 
to cope with plume impingement from the orbiter . 

Figure F-20 shows the canard structure which again is rather 
conventional. The internal structure and substructure skin are 
titanium but skin gages and outer surface material are determined 
by thermal environment considerations. This vehicle flies by 
wire so there are no linkages to the crew department. 

Figure F-21 summarizes the design criteria for the booster 
TPS. However, the creep factor has been lowered in the meantime 
to 2 life cycles with concurrence of NASA because the penalty 
would have been very severe and all structures in the TPS are, 
after all, but secondary types of structure. With a cumulative 
creep of . 2 $ and a factor of 2 , our plastic deformation in actual 
flight experience will be .1 Panel flutter might become 
critical after such plastic deformation. Flight monitoring and 
replacement, if required, should be considered since actual 
conditions cannot be simulated in laboratory type tests . 

Figure F-22 shows the pressures to which the outer TPS is 
subjected. They are quite substantial on the lower surface but 
rather mild on the upper surface. 

The heating environment is shown in Figure F-23 and gou can 
see that we are only approximately 100 seconds above 1000 F, 
that’s all. So you heat up and you cool down and everything on 
the inside will lag substantially. Consequently, the influence 
of the local heat sink on or near the outer surface will assume a 
remarkable influence on the temperatures which we actually 
experience . Figure F-24 shows a plot of TPS temperature versus 
thickness for corrugated and smooth TPS. With increasing gage 
thickness the temperature goes down so you really can tailor 
your temperatures for a vehicle like this. 

Now let us look to what we have tailored these temperatures. 
Figure F-25 shows the booster body temperatures for the TPS. We 
can use rene 4l throughout and heat sink it down to the criticality 
of this material. The required maximum gage we have determined 
is . 058 . On the wing, the situation is a bit different and rather 
serious due to nose shock impingement.. Temperatures and various 
materials which have been used on the aerodynamic surfaces are 
shown in Fig. F-26. 

Figure F-27 shows what this flash heating will do to various 
types of TPS panels. This is very interesting. The total stress 
consists of thermal stresses due to temperature gradient and 
bending stresses due to air loads. For the first configuration 
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of .016 rene 4l the total stress is 43,700 psi compared with an 
allowable of 4100 psi. So we applied heat sinking and went to 
.055 rene 4l which gave us a total stress of 37 ? 700 psi compared 
with an allowable of 13,700 psi. We still could not make the 
grade . 

We found out that in flash-heating one cannot employ the type 
of structure which we have used since the beginning of metal 
aircraft design. So we went to the third configuration shown in 
Fig. F-27. Because of the reduced moment of inertia it forced 
us to a much closer frame spacing on the lower surface but with 
essentially everything working at the same temperature we had a 
total stress of 11,800 psi compared with an allowable of 
13,700 psi. 

Figure F-28 shows the frames supporting the body TPS which 
are about 9" deep. We first had a titanium frame with a corrugated 
web but after we had found out the very high significance of 
heatsinking, we went to a quite conventional aluminum construction 
with additional beryllium caps to maintain the temperature low 
enough . 

Regarding the application of beryllium I would like to point 
out that the principal aluminum beam is designed to take limit load 
plus. However, we are stiffness critical. The weight of the 
beryllium caps on these frames is in the order of 6000 pounds but 
the total weight saving is far in excess of that. As far as 
structural reliability is concerned, even a full crack across the 
beryllium cap would have very little influence on the stiffness 
of the beam. 

Figure F-29 shows a panel TPS which we had to add on the 
wing as we went from 10,200 to 10,800 ft/sec staging velocity. We 
have flex clips for connection to the very substantial spar cap 
which is really a heat sink arrangement employed to keep strength 
allowables high with low temperatures. It is a system of floating 
panels on the outside, 4o n long. The material in the shock 
impingement area is coated columbium and the rest of the wing 
lower surface is HS-188. 

Fortunately, with the reduction in staging velocity we can 
eliminate this TPS and even the body TPS, going to heat-sink tank 
walls . The weight penalty for going from a staging velocity of 
8000 ft/sec to 11,000 ft/sec is of the Qrder of 50,000 pounds 
for this booster, in addition to the dramatic effect on design 
criteria. 
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Figure F-30 shows the materials we use on this vehicle and 
the limitations we impose on them. With all the lessons we have 
paid for we are quite reluctant to jump in with new materials 
except maybe by first getting our feet wet with a semi -structural 
application. All this refers to the B-9U vehicle; the lower 
staging velocity vehicles are not as demanding. As a matter of 
fact, all these exotic materials fall more or less by the wayside 
with the lower staging velocities. 

What I wanted to present to you was one of the most difficult 
vehicles that we treated and I hope that I have inspired your 
thinking along these lines a little bit. It is a completely new 
ball game . 
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FAIL-SAFE WITH TEAR STOPPERS ONLY 


FAIL-SAFE 


Of ■ 1.5 


ORBITER SUPPORT 
FRAMES 


FAIL-SAFE WITH MULTI-ELEMENT CAPS 
AND WEBS 


FAIL-SAFE 





r 



Fig. F-5 

BODY - STRUCTURAL COMPONENTS 





Fig. F-6 
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CREW COMPARTMENT 





FORWARD SKIRT STRUCTURE 
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LIQUID OXYGEN TANK 



0 




Fig. F-9 



INTERTANK ADAPTER STRUCTURE 




ACCESS DOOR 

CANARD SUPPORT 
BEARING - OUTBOARD 
(BOTH SIDES) 



STIFFENED INTERTANK 
SKIN 



ORBITER DRAG LINK 
ATTACH FITTINGS (2) 
TITANIUM 



lo 2 SUPPLY LINE 
EXIT (BOTH SIDES) 



INTERMEDIATE 
FRAMES (2) 



CANARD 

ACTUATOR ACCESS 
(BOTH SIDES) 



LOo TANK ATTACH 
FLANGE 

ORBITER SUPPORT FRAME 



ORBITER SUPPORT FRAME 



CANARD SUPPORT 
FRAMES (2) 



CANARD SUPPORT 
BEARING - INBOARD 
(BOTH SIDES) 



LO 2 SUPPLY LINE 
EXIT (BOTH SIDES) 



Fig. F-10 
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LIQUID HYDROGEN TANK 



Q 



MILLED INTEGRALLY 
STIFFENED SKINS - 
WELDED ASSEMBLY 
ORBITER LINK ATTACH FITTINGS 
ORBITER AFT ATTACH BULKHEADS 

FRAME STABILIZING 
LINKS (TYPICAL) 

BOLT FLANGE ^ 

BOTH SlDES_^r>v > 



STABILIZING FRAMES 
(TYPICAL) 







WING DRAG LINK 



TPS SUPPORT 
FRAMES 



DETAIL OF WING - FUSELAGE ATTACHMENT 



Fig. F-ll 

MAIN LANDING GEAR SUPPORT STRUCTURE 



SIDE LOAD LINK 



CARRY-THROUGH 
OR "SADDLE" BEAMS 
(2) TITANIUM 

FORWARD LINKS 
VERTICAL & SIDE LOADS 



WHEEL WELL TO 
LH 2 TANK 
DRAG LINK 



BULKHEAD 
\s STATION 3295 



BULKHEAD 
STATION 3020 

M.L.G. DRAG STRUT TO 
WHEEL WELL FITTING 




VERTICAL LOAD 
LINK 

DRAG LONGERON 
ON LH ? TANK 



M.L.G. MAIN 
TRUNNION FITTING 
(2 PER SIDE) 



STRUCTURAL 
WHEEL WELL 
ENCLOSURE 
Al ALLOY 



Fig. F-12 
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WING / BODY I TPS ARRANGEMENT 







ST A. 3830 




CRYOGENIC INSULATION LH 2 TANK 



ADHESIVE 

CREST 7343/1% SILANE 
OR EPON 934 




1-98 



THRUST STRUCTURE 



BORON/ALUMINUM COMPOSITE 
THRUST POSTS (12) 




TITANIUM SKIN 



BORON/ALUMINUM 
COMPOSITE STRINGERS v A 



THRUST SECTION - £ 

LH ? TANK ATTACH / 

g. 1/ 



FLANGE 



TITANIUM 

BULKHEADS 



WING ATTACH 
FITTING - TITANIUM 



VERTICAL STABILIZER 
ATTACH FITTINGS - TITANIUM 

HOLDDOWN 
FITTING (4) 
TITANIUM 



TITANIUM - BORON/AI 
COMPOSITE REINFORCED 

,■;)/ THRUST BEAMS (4) 

r } > : 



: /V BORON/ALUMINUM 

COMPOSITE TRUSSES (TYP) 



Fig. F-15 



BASE HEAT SHIELD 



9 



RENE' 41 SUPPORT CHANNELS 

- TITANIUM CORRUGATED SKIN 



RENE 1 41 BASE BULKHEAD 




COATED COLUMBIUM CORRUGATED PANEL 
(CENTER FOUR PANELS ONLY) 



RENE’ 41 CORRUGATED PANELS 



RENE* 41 REINFORCING RING 



BERYLIUM TRUSS TUBES (TYP) 

Fig. F-l6 
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WING ARRANGEMENT AND SUPPORT POINTS 



o 




Fig. F-17 



WING STRUCTURE 

MULTISPAR CORRUGATED SKIN CONCEPT 





Fig. F-18 
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VERTICAL STABILIZER 




CANARD STRUCTURE 





Fig. F-20 
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DESIGN CRITERIA, BODY TPS 



• LIFE 100 FLIGHTS, NO REFURBISHMENT 

• AIRLOAD/TEMPERATURE HISTORY 

• ACOUSTICAL ENVIRONMENT 

• VIBRATION 

• PANEL FLUTTER 

• FACTOR OF SAFETY = 1.4 

• FATIGUE FACTOR OF 4 ON CYCLES 

• CREEP FACTOR OF 4 ON LIFE 

• TOTAL CUMULATIVE CREEP - 0.2% 

• LEAKAGE 350 IN. 2 EQUIVALENT 



Fig. F-21 

PANEL PRESSURES, TPS SHELL 




(+) DENOTES CRUSHING PRESSURE 



Fig. F-22 
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BOOSTER TEMPERATURE PROFILE 



1800 
1600 
1400 
1200 
1000 

TEMPERATURE (F) 800 

600 
400 
200 
0 

0 100 200 300 400 500 

TIME (SECONDS) 




BODY LOWER SURFACE, 0- 0 DEGREES 



Fig. F-23 




... i i 1 1 1 1 1 > 1 

0 0.05 0.10 0.15 

TPS THICKNESS, t (INCHES) 



Fig. F-24 
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B-9U BOOSTER BODY TEMPERATURES 



o 




STA* 1400 



Fig. F-25 



THERMAL PROTECTION SYSTEM (AERO SURFACES) 




TEMPERATURE (F) 




•TEMPERATURE INCLUDES 200F FOR 
EFFECT OF SEMI-FLAT SURFACE 



A INNER SKIN TEMPERATURE 



I TITANIUM 
I INCONEL 718 
I RENE 41 
I HS 188 

I COATED COLUMBIUM 
I CARBON/CARBON 



Fig. F-26 
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TPS PANEL CANDIDATES 



LOCATION 
ON TPS 


PANEL CONFIGURATION 


MATERlAt 


SHEET 

THKNESS 

<f> 


TEMP 

(r-) 


MAX. 

THERMAL 

GRADIENT 

STRESS 


TOTAL 

STRESS 

(PSI) 


ALLOW 

STRESS 

(PSI) 


LOWER 

SURFACE 


W 


RENE* 41 


.016 


1.750* 


39,200 


43,700 


4,100 




t r.5o J 


RENE* 41 


.055 . 


1,600* 


35,700 


37,700 


13,700 




.40*1 r 4-00—} 


RENE* 41 


.055 


1,600* 


0 


11,800 


13,700 


SIDE 


1 — »- 40 — 1 

I.OOj / \ / \_ 


INCONEL 

718 


.035 


1,180* 


44.500 


59,000 


64,500 


SIDE 

& 

TOP 


p— 4.60 — *j 


TITANIUM 

6AL-4V 


.030 


695* 


6,000 


17,500 


18,500 



«d) INCLUDES EFFECTS OF HEAT SINKING AND 
SURFACE GEOMETRY 



Fig. F-27 
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INTERNAL STRUCTURE - BODY TPS 





SECTION A-A 



Fig. F-28 





SUB- FRAME 
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WING LOWER SURFACE TPS 








Fig. F-29 



r 

BOOSTER TPS MATERIAL TEMPERATURE LIMITS 




MATERIAL 


TEMP. 

(°F) 


RATIONALE 


TITANIUM 


800/ 

650 


STRESS CORROSION CRACKING LIMITS USE AT TEMP. ABOVE 650°F TO VERY SHORT 
TIME & LOW STRESS. HIGHER LIMIT OF 800°F MAY BE CONSIDERED FOR BOOSTER 
COMPONENTS WHERE TIME & STRESS CONDITIONS PERMIT 


INCONEL 718 


1,350 


1 , 350°F IS AGE TEMP. OPERATION ABOVE THIS TEMP. SEVERELY DEGRADES 
MATERIAL 


RENE' 41 


1,650 


ABOVE 1,600°F, INTEGRANULAR OXIDATION OCCURS. TIME ABOVE THIS ON 
BOOSTER IS SHORT ENOUGH TO BE ACCEPTABLE 


HAYNES 188 


1,900 


CREEP LIMITED. TIME AT TEMP. AFFECTS TOTAL CREEP. BOOSTER ACCEPTABLE 
BECAUSE TIME IS APPROXIMATELY 1 MINUTE PER MISSION 


TD NiCr 


2,200 


LIMITED BY CREEP & HIGH TEMP. STRAIN CAPABILITY. TIME AT TEMP. & LOADS 
OF BOOSTER PERMIT HIGHER TEMP. APPLICATION 


COLUMBIUM 

752 


2,500 


2,500°F IS UPPER LIMIT FOR COATING REUSABILITY 


CARBON/ 

CARBON 


3,000 


BASED ON PLASMA-ARC TESTS 



Fig. F-30 
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STRUCTURAL DESIGN CONSIDERATIONS FOR 
ADVANCED AIRCRAFT 



J. E. Fischler 
Douglas -Long Beach 



Only the figures and an abstract are available. 



Abstract: Structural Engineers must continue to investigate ways 

to save structural weight without losing structural 
integrity. Two computing programs were used to 
determine a basis for comparing advanced materials and 
types of construction with existing aluminum structure. 
One computing program determines the rate of crack 
growth from the material characteristics (Kg = critical 
stress intensity factor, R = stress range, AK = stress 
intensity factor, B and n = material characteristics 
and type of construction, and R c t = stress ratio of an 
unstiffened panel to one with stiffeners and/or crack 
stoppers). A second program solved for the probability 
of structural failure using the mean 1 g stress and 
coefficient of variation of mean load (dependent on the 
type of mission), mean strength and coefficient of 
variation of mean strength, and residual strength which 
decreased as a function of the crack length and panel 
stiffening at any time after first flight. Ways were 
shown to calculate the probability of initiation of a 
crack and its percentage of total fatigue damage. For 
ease of comparison, and reduction of computer time, 
all the materials compared were based on an undetected 
crack of 0.2 inches initially. The theoretical results 
were compared to actual tests on a 96 inch wide stiffened 
panel. Modifications to the theoretical coefficients 
were recommended due to practical considerations of the 
slowdown in crack growth when the crack tip reaches an 
attachment, when a stiffener fails, when the fracture 
toughness, and AK values vary with crack length, when 
the value of R c ^ varies with stiffener area and crack 
length, and when the stress spectra has occasional 
high stress cycles that modify the plastic zone ahead 
of the crack tip and actually slows down the rate of 
crack growth for the average cyclic stresses . 
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The materials compared, were aluminum (202U-T3, 7075-T6), 
titanium and graphite epoxy. The great weight advantage 
of graphite -epoxy at as low as 10,000 psi 1 g stress and 
the low probability of failure allowed many more flights 
and longer inspection intervals (thus reducing Maintenance 
Costs ) . 

Desirable future analysis methods, material characteristic 
and type of construction research, and other structural 
research plans were illustrated as areas for Structural 
Development to reduce the structural weight and improve 
the Structural Reliability (Lower the Probability of 
Structural Failures ) . 

One of the most desirable results of the study are the 
charts that have been prepared that represent over two 
hundred data points . These charts give the Structural 
Analyst the opportunity to compare materials at different 
stress levels, mission load variations, mean strength 
variations, number of flights, structural efficiency, 
residual strength, and variation of material parameters 
all versus the Probability of Failure. These overall 
views of various materials and types of construction 
can be very useful for choosing a material and also 
determining what future research is essential for 
saving structural weight and improving structural 
reliability. 
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DIRECT OPERATING COST = CENTS/SEAT-MILE 
RETURN ON INVESTMENT = PROFIT PER YEAR/COST 



DOC. 



FLIGHT OPER COSTS + DEPRECIATION + FLIGHT INSURANCE + MAINTENANCE + FUEL COSTS 
RANGE x PAYLOAD 



RETURN ON INVESTMENT 



PROFIT PER TRIP x NUMBER TRIPS PER YEAR 
ORIGINAL COST PER AIRCRAFT 



RANGE 



2.3 



(L/D) w 



LOG,, 



W 0 = WEIGHT AT INITIAL CRUISE 
W, = WEIGHT AT FINAL CRUISE 



Fig. G-l 





Fig. G-2 
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DISTRIBUTIONS OF COST AND WEIGHT 



COST 




WEIGHT 





STRUCTURE PROPULSION 




FUEL AND PAYLOAD OR 

ELECT. OTHER COSTS 



Fig. G-3 



RANGE CHART 



W. 

W 0 




Fig. G-4 
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PAYLOAD vs GROSS WEIGHT 




Fig. G-5 



NEW VEHICLE COST 
WITH CHANGE IN STRUCTURAL COST 



ASSUME 30 PERCENT STR WGT DECREASE = 60 PERCENT STRUCTURAL COST INCREASE (COMPOSITE 
STRUCTURE) 



30 PERCENT STR WGT - 40 PERCENT PAYLOAD GAIN 



NEW COST 



. rn^si-oJ . 
L 130 J 



15.6 PERCENT COST INCREASE 



ASSUMED VEHICLE COST = 25 MILLION 
1.156 x 25M = 28.9 MILLION = (NEW COST) 



Fig. G-6 



I -111 



RETURN ON INVESTMENT 



$2000/FLIGHT AT 60 PERCENT LOAD FACTOR (SST) 

$2000 x 4 FLTS/DAV x 300 FLTS/YR 



RETURN ON INVESTMENT = 
(45% BREAKEVEN L.F.) 



25,000,000 

R.O.I. = 9.6 PERCENT PER YEAR 
NEW AIRCRAFT IS 30 PERCENT LESS STR. WGT. 

25% W 



NEW STR. WGT. FRACTION = 



1.3 



19.2% W 



LET ALL STR. WGT. DIFF. BE ADDED TO PAYLOAD 

OLD PAYLOAD FOR BREAKEVEN = 0.45 x 18% W = 8.1% W 

8.1 + (25% W - 19.2% W) 



RATIO INCREASE IN REVENUE 



8.1 



= 1.72 



STRUCTURAL COST HAS GONE UP 60% = 15.6% FOR TOTAL AIRCRAFT 

NEW BREAKEVEN = X 



(0.60 L.F. - X) = (0.60 - 0.45) 



1.72 



X = 0.377 



1.156 

NEW PROFIT/FLT. AT 60 PERCENT L.F. = S2980/FLT (USING 60% - 37.7%) 

2980 x 4 FLT/DAY x 300 



NEW RETURN ON INVESTMENT = 
(AT 37% BREAKEVEN L.F.) 



28,900,000 

NEW R.O.I. = 12.4 PERCENT/YEAR 

PERCENT IMPROVEMENT = 12.4/9.6 - 1 = 30 PERCENT 



Fig. G-7 



MAINTENANCE GAINS 



(1) MAINTENANCE = TWICE ORIGINAL COST OR 25 PERCENT OF D.O.C. 

(2) ASSUME 20 PERCENT OF MAINTENANCE COST FOR ACCESS, INSPECTION, AND REPAIRING STRUCTURE 
AT SCHEDULED INSPECTIONS. 

(3) ASSUME GOAL IS TO DOUBLE INSPECTION INTERVAL (i.e., 9,200 FLT TO 18,400 FLT ) 

20 % 

(4) PROGRAM COST REDUCTION = 2 x 2 x 25M = 5 MILLION 

20 % 

D.O.C. COST REDUCTION 2= x 25% = 2.5% 

2 



Fig. G-8 
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GAIN IN DIRECT OPERATING COST 

STRUCTURE WEIGHT SAVING AND DOUBLE INSPECTION INTERVAL 



A D.O.C. = 1 - 



OLD CONFIGURATION 
NEW CONFIGURATION 



DEPRECIATION/TRIP 

(12 YR) AND 14,400 TRIPS 

MAINTENANCE/TRIP 

FUEL COST/TRIP 
AT $0.01493/N Ml 

FUEL = 0.48 WGT 
WGT = 600,000 LB 

RANGE x PAYLOAD 



9510 

A D.O.C. = 1-9430 = 1 -1.41 
1.4 

A D.O.C. = -0.41 



OLD CONFIGURATION 

/ PRICE = 25M \ 
\MAINT = 50M/ 

$1730 

$3480 

$4300 



1.0 



$9510 



NE W CONFIG UR ATION 

PRICE = 

MAI NT 



/ PRICE = 28.9M \ 
^ MAINT = 45M ) 



$2010 

$3120 

$4300 



1.4 

(40 PERCENT BETTER FOR 
30 PERCENT STR WGT 
SAVING) 



$9430 



Fig. G-9 



CRACK LENGTH AS A PERCENTAGE OF FATIGUE LIFE 



E 

E 



40 



36 



32 



J? 28 

X 

ro 

</> E 24 



20 
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EXTRAPOLATEI 


! 

D RESULTS — ^ 


1 
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N = FATIGUE LIFE IN CYCLES 
N=30,000 



N=45,000 

N-70,000 

N=110,000 

N=180,000 

N=280,000 

N=550,000 

N=4,000,000 



0 20 40 60 80 100 

PERCENTAGE OF FATIGUE LIFE CONSUMED, n/N (PERCENT) 



PR7I-GCN-20i37 



Fig. G-10 
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A SAFETY GOAL <P V T, 

B SUBSONIC SPECTRUM 
t, 3000 Ins. R 10 000 



10 ,0 ) 


c 


SUPERSONIC SPECTRUM 
\ 1500 hrs. R 4000 hrs 


hrs 


D 


SUBSONIC SPECTRUM 
t 3000 hrs R 4000 hrs 



E SUPERSONIC SPECTRUM 
t, = 3000 hrs, R = 4000 hrs 

F T ( . = 50,000 hrs 
G T ( . = 30,000 hrs 




FIGURE 11. PROBABILITY OF STRUCTURAL FAILURE OF FATIGUE 
CRITICAL WING COMPONENT VERSUS FLIGHT HOURS 



Fig. G-ll 



RELIABILITY 



PROBABILITY 

DENSITY 



R = 




R = pR (X > Y) = PROBABILITY THAT THE STRENGTH X IS GREATER THAN 
THE APPLIED STRESS Y 



R = 



IF Y' 
R = 



OO 

f G(X) f(X) 

2 OO 

X 



dX 



G(X) = f g(Y) dY 

2 oo 

IS NOT A RANDOM VARIABLE BUT ALWAYS OCCURS (1g STRESS), THEN 
pR (X > Y) = SHADED AREA UNDER f(X) 



PR 7 1 -GEN-2C 

Fig. G-12 



1-114 



PROBABILITY 
DENSITY 
FUNCTION 
OF LOAD 
OR STRENGTH 




LOAD OR STRENGTH 

Fig. G-13 



PROBABILITY OF STRUCTURAL FAILURE 

DEPENDS ON: 



= MEAN STRENGTH IN PSI 

MEAN LOADING IN PSI (ONE g STRESS) 






STANDARD DEVIATION OF LOADING 
MEAN LOADING (ONE g) 



(MEASURE OF SPECTRA RANGE) 



STANDARD DEVIATION OF STRENGTH 
MEAN STRENGTH 

RESIDUAL STRENGTH 
K C R CT 

7ra 

W TAN 

W 



K c * FRACTURE TOUGHNESS = VARIES WITH MATERIAL, DIRECTION OF LOADING, CRACK STOPPERS = 
(TYPE OF CONSTRUCTION); SIZE OF CRACK TO PANEL WIDTH, THICKNESS, 

R ct = RATIO OF STRESS IN THE REGION OF THE CRACK TIP IN AN UNSTIFFENED PANEL TO THAT IN A 
STIFFENED PANEL 

C = FINITE PANEL WIDTH CORRECTION FACTOR 

W = PANEL WIDTH 

a = HALF CRACK LENGTH 



Fig. G-l4 
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PROBABILITY OF STRUCTURAL FAILURE 

ALSO DEPENDS ON: 



— = RATE OF CRACK GROWTH PER CYCLE 

dN 

da _ BAK n 

dN " ( 1 — R) K c - AK 

a MAX / 7T3 

AK = (1— R) C v/W TAN — = RANGE OF STRESS INTENSITY FACTOR 

r ct v w 

B = VARIES WITH MATERIAL, TYPE OF CONSTRUCTION, LOCATION OF CRACK TO ATTACHMENTS, 
TYPE OF ATTACHMENTS 

a MIN _ MINIMUM STRESS 

R ” a MAX ” MAXIMUM STRESS 

K c = FRACTURE TOUGHNESS 



Fig. G-15 



PROBABILITY OF FAILURE AFTER A CRACK OCCURS 



P (FAILURE) 



1 

— erfc 
2 





WHERE: 






1.5 L s 




L s = LIMIT STRENGTH 



FACTOR OF SAFETY = 1.5 BETWEEN THE DESIGN LIMIT LOAD 

AND THE 99TH PERCENTILE VALUE OF 
ULTIMATE STRENGTH 



Fig. G-l6 
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PROBABILITY OF STRUCTURAL FAILURE vs 
STRENGTH, LOAD AND NUMBER OF FLIGHTS 

ALUMINUM WING 



P S = 

PROBABILITY 

OF 

STRUCTURAL 

FAILURE 




2024 T3 

1G = 13,500 PSI 
N f ,„ * 33,751 
K c = 85,000 
FAILURE AT 
N = 36,251 
1G = 10,000 PSI 
N C1TC = 158,850 




ONE 
RUN " 



2.0 3.0 4.0 5.0 

/i s /ji L = MEAN STRENGTH/MEAN LOAD (1G) 



PR71 GEN-20455 



Fig. G-17 



PROBABILITY OF STRUCTURAL FAILURE vs 
STRENGTH, LOAD AND NUMBER OF FLIGHTS 

TITANIUM WING 



PROBABILITY 

OF 

STRUCTURAL 

FAILURE 




PR7J.GEN ?0449 



Fig. G-18 
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PROBABILITY OF STRUCTURAL FAILURE vs 
STRENGTH, LOAD AND NUMBER OF FLIGHTS 



p s = 

PROBABILITY 

OF 

STRUCTURAL 

FAILURE 



GRAPHITE/EPOXY 




P»7l.GeN-20457 



Fig. G-19 







SUBSONIC JET TRANSPORT (DOMESTIC ROUT^)* 

MACH = 2 SPECTRUM 
• ./ MACH = 3 SPECTRUM 



MATERIAL — TITAfflU 



! ITLL:^ 









•A* » 



.*•» 



10,000 20,000 

HOURS OF LIFE 



30,000 



MEAN STRESS VERSUS FATIGUE LIFE 
FOR SUPERSONIC TRANSPORT 



U ^ 

*' V . 



Fig. G-20 
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RADIAL LOAD DUE TO CABIN PRESSURE 




Fig. G-21 



FUSELAGE FAIL SAFE CRITERIA 



• ALL FLIGHT AND PRESSURE 




Fig. G-22 



1 - 11 ° 







Fig. G-23 



COMPARISON OF MATERIALS FOR DAMAGE TOLERANCE 

7075 T73 VERSUS 2024 T3 







TRANSVERSE TWO BAY CRACK WITH 
BROKEN CENTRAL LONGERON 

.ter. 






MATERIAL 



707 5 T 7 3 
, 2024 T3 



*C 

PSIvTN 

j 



$5787 

080*0 



GROSS 
RESIDUAL 
/ STRENGTH. Om 

li 

20000 
2 SICK) «_ 





Fig. G-24 
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EFFECT OF THICKNESS ON STRESS 
INTENSITY FACTOR 



STRESS 

INTENSITY 

FACTOR 




PR 71 -GEN *2053 5 

Fig. G-25 



RESIDUAL STRENGTH OF UNREINFORCED PANEL 



STRESS 




CRACK LENGTH 



PR71-GEN-20539 

Fig. G-26 
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STRESS, S 



STRESS , S 



RESIDUAL STRENGTH CHARACTERISTICS 
OF STIFFENED PANEL 

STRINGER CRITICAL 




2a=2s 

CRACK LENGTH. 2a 



7 1-GEN 20540 

Fig. G-27 



RESIDUAL STRENGTH CHARACTERISTICS 
OF STIFFENED PANEL 

SKIN CRITICAL 




PR71-GEN 20534 



Fig. G-28 
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CRACK PROPAGATION RATE, (iN./CYCLE) 



FUSELAGE PANELS 

(FAIL SAFTY) 



R 



ct 



12/4/69 




TOTAL CRACK LENGTH 




PR69-GEN-24288 



Fig, G-29 



FATIGUE-CRACK PROPAGATION IN A PANEL 
REINFORCED WITH ALUMINUM -ALLOY STRINGERS 



SPACED AT 6 INCHES 

a (mm) // = 0.58 




Fig. G-30 
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(mm/CYCLE) 



GROSS RESIDUAL STRENGTH CURVES FOR 
CURVED PANEL NO. 15 



GROSS 
RESIDUAL 
STRESS 0 R 
(KSI) 
(HOOP 
TENSION) 
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1 BAY TESTS 1 AND 2 




65,114 



2 BAY TESTS 3 AND 4 
— O— AXIAL STRESS = 0 
V — □ — AXIAL STRESS 
y = 28,495 PSI 

\ K c * = 80,573 PSl/TrT 
\ c 




TOTAL CRACK LENGTH (IN.) 

Fig. G-31 
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COMPARISON 

OF THE FATIGUE CRACK GROWTH 

RESULTS FOR TEST 2 OF PANEL 2 AND TEST 1 OF PANEL 4 



CRACK 
LENGTH, 
INCHES 
FROM t 




CYCLES (N x IQ* 2 ) 



12/4/69 



Fig. G-32 
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EFFECT OF OVERLOAD IN 
CONSTANT AMPLITUDE TEST 



CRACK 
LENGTH 
I mm) 




NUMBER OF KILOCYCLES 



Fig. G-33 



COMPARISON OF CRACK GROWTH RATE 
PARAMETERS WITH TEST RESULTS 



CRACK 

LENGTH 

(INCHES) 




CYCLES (1000) 



PR71GEN-20447 



Fig. G-34 
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DELAY OF CRACK PROPAGATION AS A FUNCTION 
OF PEAK LOAD MAGNITUDE 




W KG'"'"' 2 ) 

PR7IGEN 20531 



Fig. G-35 




12/4/69 





CRACK GROWTH RATE. _ JIWCH PER CYCLES 
AN 



PR6 9-GEN-24333 



Fig. G -36 
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CONCLUSIONS 



(1) PROBABILITY OF STRUCTURAL FAILURE GOOD TOOL FOR SELECTING MATERIALS AND TYPES OF 
CONSTRUCTION 

(2) ONE g STRESS MOST IMPORTANT 

(3) SPECTRA VERY IMPORTANT 

(4) STRENGTH VARIATION NEEDS MORE TEST DATA 

(5) FRACTURE TOUGHNESS AND RATE OF GROWTH NEEDS MORE ANALYSIS AND TESTING USING FULL 
STRUCTURAL COMPONENTS. 

(6) THE INSPECTION INTERVAL AND STRUCTURAL WEIGHT SAVING INFLUENCES THE: 

(a) RETURN ON INVESTMENT 

(b) D.O.C. 

(c) MAINTENANCE COSTS 

(7) GRAPHITE/EPOXY WILL BE A GOOD CHOICE FOR WEIGHT SAVING AND STRUCTURAL INTEGRITY 
(LIFE) IF 1 g STRESS LEVEL IS APPROXIMATELY 10,000 PSI 



Fig. G-37 
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AVERAGE AIRFRAME COSTS 
PER POUND OF STRUCTURE 

1970 DOLLARS 



The cost may be described by: 



Cost = (M + L) x {increments] 

Where 

M = Raw Material Cost x f^sec ' We.ght 

Flyaway Weight 

L = All Direct Labor Including Overheads 
[increments] = (1 + R) x (1+E) x (1+G) 
R = increment for RDT&E 

E = increment for ECP's 

G = increment for G&A 

P = increment for Profit 



(1 + P) 











FACTORED 




RAW MATERIAL 


FLYAWAY WT 




TOTAL COST PER LB 


MATERIAL 


COST S/LB 


PURCHASED WT 


LABOR COST 


200 UNITS 


500 UNITS 


Aluminum 


0.66 


0.359 


105 


148 


107 


Steel 


0.18 to 1.00 


0.049 


113 140 


196 


166 


Titanium 


11.15 


0.308 


227 


366 


309 


GFRP 


5.31 


0.862 


165 


237 


171 


Beryllium 


360.00 


0.308* 


656 


1750 


1480 



•Assumed Same as Titanium 



Fig. G-38 
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SPECIFIC STRENGTH vs SPECIFIC MODULUS 

METALS vs COMPOSITES 




0 10 20 30 40 50 60 70 



SPECIFIC MODULUS, E/P (10 7 IN.) 

Fig. G-39 



REDUCTION IN VEHICLE STRUCTURAL WEIGHT 
BY USE OF HIGH MODULUS COMPOSITES 




YEAR 

PR 6 9-A DC 5-0 196 7 



Fig. G-UO 
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REDUCTION IN TAKEOFF WEIGHT 

DUE TO 1985 TECHNOLOGICAL IMPROVEMENTS 



RELATIVE 

MAXIMUM 

TAKEOFF 

WEIGHT 

(PERCENT) 




PR69-ADCS-1739C 

Fig. G-4l 



REDUCTION IN DIRECT OPERATING COST 

DUE TO 1985 TECHNOLOGICAL IMPROVEMENTS 



RELATIVE 

DIRECT 

OPERATING 

COST 

(PERCENT) 




8/5/69 



Fig. G-42 
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TRENDS IN MATERIALS USAGE 

PERCENT 

(FOR PROPULSION) 

COMPOSITES AI/MG TITANIUM STEELS SUPERALLOYS 



J47 (1950) 
J79 (1955) 
J93 (1960) 
GE4 (1965) 
TF39 (1965) 
NEXT GENERATION 




PR7I-OC10-I1229 



Fig. G->*3 



SPECIFIC FUEL CONSUMPTION vs YEAR 



THRUST 

SPECIFIC 

FUEL 

CONSUMPTION 

LB/HR/LB 




1930 1940 1950 1960 1970 1980 1990 2000 



YEAR 



-*» 3Cl»l«44?a 



Fig. G-44 
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RANGE PARAMETER IMPROVEMENT 




8/12/69 
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Fig. G-U5 
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HT REDUCTION OF STRUCTURAL SYSTEM 




Fig. G-U6 
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DEVELOPMENT MILESTONES 

STRUCTURAL AND DYNAMIC ANALYSIS 
1950 1970 1990 

" t t lii 1 ! — t 1 



I I I I ' INTEGRATION OF DIRECT SYNTHESIS METHODS. 

I | I | DIGITIZED DRAWINGS. AND NUMERICALLY 

I I | | CONTROLLED MANUFACTURING 

I I l ADVANCED USE OF DIRECT SYNTHESIS METHODS 

I I FULLY INTEGRATED ANALYSIS OF LOADS, STRENGTH, AND LIFE 

1 * DYNAMIC AEROELASTIQ LOADS VIA INFLUENCE COEFFICIENTS 

INITIAL USE OF DIRECT SYNTHESIS METHODS 

' ADVANCED COMPUTER ANALYSIS OF STRENGTH 

PSD ANALYSIS OF GUST RESPONSE 

INITIAL USE OF ELECTRONIC COMPUTERS (STRENGTH AND FLUTTER ANALYSIS) 

PR69-GEN2 

Fig. G-U7 



DEVELOPMENT TRENDS 

STRUCTURAL AND DYNAMIC ANALYSIS 



EMPHASIS 

• AUTOMATION OF PROCEDURES 

• INTEGRATION OF TECHNOLOGIES 

BENEFITS 

• ELEVATED VIEWPOINT FOR DESIGN ENGINEER 

• MORE EFFICIENT USE OF ENGINEERS 

• IMPROVED COMMUNICATION BETWEEN DISCIPLINES 

• INCREASED RELIABILITY, SERVICEABILITY, 

AND EFFICIENCY OF STRUCTURAL SYSTEM 

Fig. G-U8 
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PLANS FOR FUTURE DEVELOPMENT 



MATERIALS DATA 




2/ 16/60 



PR71-GEN-20459 



Fig. G-U9 



STRUCTURAL DESIGN BY DIRECT SYNTHESIS 

(FUTURE) 



DESIGN 




OPTIMUM 

STRUCTURE 



8/4/69 



Fig. G-50 
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PRELIMINARY STRUCTURAL DESIGN 




2/16/68 
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SOME PRACTICAL ASPECTS OF RISK EVALUATION 



J. W. Ellis 

North American Rockwell- -Los Angeles 



Abstract: Risk evaluation in aircraft design is still far from 

being a useful tool. An approach is shown by 
identifying uncertainty factors and impact factors 
for determining a risk exposure index. Continuing 
development is bound to take place in this field- - 
pointing toward an important tool in the design 
decision process. 



I almost feel that I should apologize for introducing such 
an elusive subject as risk evaluation in a meeting encompassing 
so many discussions on good solid, data-substantiated , hardware- 
oriented problems. Why then, is this subject included here? Why 
not leave this tenuous field to a management symposium? It is 
true that, historically, risk has been primarily the province 
of the manager, but the simple truth of the matter is -- the 
manager needs help! 

I am neither a program manager nor risk analyst, but in 
my activity in preliminary design, whenever decision time comes 
around, I feel a strong need for some methodology in the risk 
area. To be of value in the detail decision procedure, this 
methodology must, of necessity, produce quantitative information 
which can be entered into the decision process much the same as 
weight or cost. The goal of applying rational risk analysis 
at the detail design decision level is not yet attainable, but 
recongition of risk as a valid parameter in the decision process 
has been made, and the first steps toward rational analysis 
methods are being taken. 

The Decision Process 



Let us examine what is involved in the structural design 
decision process. I believe everything that goes through the 
mind of the decision-maker will fall into one of the four 
categories shown in Figure H-l. The first one, the cost -weight 
combination, of course, is a pretty large piece of our structural 
world. It is considered here as a combination because I think 
we have learned to deal with cost and weight as a trade. They 
are not treated independently as they once were. Through value 
engineering techniques which enable us to equate weight changes 
with airframe growth, and subsequently with cost, we are able 
to reconcile the weight and cost dichotomy. The second item, 
reliability, is rapidly being quantified through developments 
in fatigue analysis, fracture mechanics, fail-safe design 
techniques and statistical approaches to structural failure 
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prediction. Thus this factor is approaching the point where it 
can be included in a quantitative way in the decision process. 
Schedules, of course, have always occupied a commanding spot in 
the decision process. We not only want to get our airplanes out 
on time, but once we get locked into a master schedule, we know 
we have to contribute a lot of blood, sweat and tears, and 
frequently money, to change. Design decisions dependent upon 
schedule factors are usually made on a go/no-go basis and thus 
require but little methodology to rationalize once scheduling 
is established. 

The fourth decision factor is risk. It is a different type 
of consideration from the other three and is certainly the most 
elusive. Risk can be considered a quality of the cost/weight, 
reliability, and schedule factors in that it pertains to the 
likelihood of achieving goals in these areas, hence the bracket 
on the chart indicating that risk encompasses the other three. 
Certainly there can be no doubt that in spite of its elusiveness, 
it is essential to consider exposure to loss when we are about 
to make a design decision. Such consideration requires methodology, 
both to assess the risk, and to express it in quantitative terms 
compatible with the other factors under consideration. 

Risk Evaluation 



What is risk evaluation? It has been said that it is a 
sophisticated way of turning chicken and I think there is 
something to that; however, the subtle art of turning chicken 
at just the right time is one of the key requirements of 
remaining solvent in your job, your company, or your program. 

The manager who always takes minimum risk, goes down in flames 
when technology or his competition catches up with him, and the 
manager who disregards risk, follows the same path, but his 
flames have historically proven to be not only bigger but 
substantially hotter. 

Let us examine the basic elements of risk evaluation as 
shown in Figure H-2 . All risks involve both uncertainty and 
impact. There can be no risk without both of these items 
present. If you have a great uncertainty, but no impact as 
consequence of the uncertainty, then there is no risk; or 
conversely, if you have a great impact but you know with 
certainty how things are going to come out, there is no risk 
there either. So we have to look at both elements of this pair 
before we can say we have looked at risk. 

Much of the imput data on the nature of the uncertainty 
will be subjective. Generally it must be learned from opinions, 
and but little will be clearly defined. However, this data must 
be quantified or we cannot work with it from an analytical 
standpoint. Risk impact may have a number of forms, but is 
usually resolved in terms of dollars, schedule impact, or system 
performance impact. 
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After we have evaluated the uncertainty and the impact, I 
think a professional judgment will always he involved in arriving 
at the final decision, at least in the foreseeable future. 

I don’t believe any of the risk people claim that we will have 
an automatic system that circumvents or eliminates the judgment 
factor. The analytical risk work is properly used to place 
this judgment on a sound factual basis. The decision may be 
based on one of several criteria. It may be a decision to 
minimize risk as is shown in the figure, but it may more often 
consist of a balancing of risk versus advantages. 

Stumbling Blocks 



There are a number of stumbling blocks which will always 
render the job of risk analysis difficult. Several of these 
are shown in Figure H-3* Uncertainty assessment most frequently 
is a subjective matter especially when we are dealing with a new 
subject where we have only limited historical data. It is 
subjective because we must gather our working information by 
asking people to express opinions on risk. We often will have 
no other way to obtain information. The uncertainty judgment 
required may be a complex one. Other uncertainties may be 
involved, and it is difficult for the human mind to correlate 
several subjective judgments. 

In the area of impact assessment, there are often multiple 
alternatives rather than a single- valued solution. Impacts may 
also be subject to a domino effect where one event will trigger 
off a number of others requiring the ability to analyze the 
system well enough to know the full extent of the dislocations 
created . 

Possibly the most formidable stumbling block is that of 
arriving at a decision after the evaluating information is 
obtained. Frequently, the evaluation may yield probabilities 
of impacts in cost, schedule, and system performance simultaneously; 
a mixture of apples, oranges, and grapes. A common denominator 
is required to reduce the problem to manageable form. 

Qualitative Risk Evaluation 



Several approaches to risk evaluation exist. Figure H-4 
presents a very simple one. I call it the qualitative approach. 
It is based on an off-the-top-of-the-head probability evaluation, 
quantified slightly by stating whether there is a high, medium 
or low probability of failure. Some recognition of the impact 
is taken by estimating, generally, what kind of trouble a 
failure would bring. The final decision then is made by 
invoking the powers of a 1T Big Daddy" in the organization. His 
decision may be arbitrary, but it is very often unassailable. 
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Before we sneer too much at this type of approach , I think we 
should recognize that it has two things going for it; It is 
head and shoulders above no risk analysis at all, and it is the 
most commonly used method of all. 

Risk Index Approach 

A significant advancement over the approach just described 
is in use in some segments of the industry today as a comparative 
method of risk analysis. This is known as the risk index method, 
and is diagramed in Figure H-5. Here we introduce a systematic 
quantification of the risk factor. First we identify the risk 
areas and then break them down into uncertainty factors and 
impact factors. Next we identify the uncertainty factors 
involved, observe their relationships, and segregate them. 

This simplification makes it easier to think about the problem 
as we gather subjective data from our personnel. We don ! t try 
to treat more than one factor, or one coupling of factors at a 
time . Rather than thinking about the whole problem, we look at 
one piece at a time and assign probability indices to each piece. 
These are usually expressed as percentage figures because we 
are used to thinking in percentages. 

Similarly, we look at the impacts, which may be in terms 
of cost, schedule, or performance and assign an index to them. 
Frequently this index can be reduced to the form of dollars . 

Finally a risk exposure index is derived by multiplying the 
uncertainty, or probability of failure index, by the impact 
index. Because of the somewhat arbitrary nature of the index 
factors, this method is most commonly used to compare the risk 
exposures of alternate solutions to a design problem. When used 
in this manner, this technique can be remarkably effective at 
the detail design level. Although useful as a means of comparison, 
this method is more of a straightening-out-of-thinking than it 
is real methodology. 

Figures H-6 and H-7 show an example for a real design 
problem. In this instance, consideration is being given to a 
design change to composite construction for an aircraft component, 
at a good saving in weight. Risks are involved, both in the 
basic material properties to be used in design, and in the 
validity of composite component analysis methods. In the first 
case, any error would be detected early in the program through 
element tests, while errors in analysis would become apparent 
only late in the program in component testing. Assigning 
subjective estimates of probability of failure and applying the 
risk index analysis results in a risk exposure index of $55*000 
as shown in Figure H-7- 
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The index may be interpreted in several ways. It may be 
compared with similar analyses of alternate approaches to 
achieving the same goals , or it may be treated in a probabilistic 
manner by declaring that any means of reducing the risk to zero, 
such as early tests, etc., which can be accomplished for 
$55^000 or less, is a good action to take. Another evaluation 
may be made by comparing the risk exposure index to the dollar 
value of the weight saved as determined through value engineering 
analysis . 

This is about the present limit to the application of risk 
analysis at the detail design decision level. The method has 
several basic deficiencies which limit its value. It does not 
consider a range of probabilities of failure versus various 
degrees of impact, only discrete points on the curve. It also 
cannot deal with the interaction of a number of probabilities 
and consequences. In addition there is no provision for converting 
the direct consequences of a failure to meet a goal into a 
relevant impact upon the system. Finally, there is no attempt to 
provide a valid comparison between the risk exposure and the 
advantages to be gained. It appears that a more sophisticated 
methodology is needed. 

Rational Probability Risk Analysis 



There has been some work done in the associated field of 
contract management and incentive fee allocation, employing a 
rational probability approach which may answer some of the 
objections stated above. In Figure H-8, I have diagrammed a 
hypothetical approach to risk evaluation using some of the 
elements of rational probability analysis and, in addition, 
answering some of the other objections stated above. Here we 
take the proposed concept and identify the risk areas as before. 
Then we set up a probability network which relates the various * 
facets of uncertainty involved in the problem. We relate them 
and assign values through a procedure similar to the one shown 
for the risk index analysis, except that, instead of discrete 
values for probabilities and consequences we describe them through 
probability curves relating probability of occurence with 
consequences over a range of values. Through the probability 
network analysis we arrive at an output which is a resultant 
probability versus consequences, again in the form of curve 
data rather than discrete points. However, we are probably not 
looking for the consequences as such, but rather for the response 
of the system to these consequences. So we do a sensitivity 
analysis to see what significance weight, delay, or any other 
result really has to the system. From this we derive a relevant 
impact, usually in the form of a cost, schedule, or performance 
factors. We would like to reduce this to a common denominator 
if possible, usually in terms of dollars. 
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We can next take the probability- impact data, put them into 
the form of a probability density function, and multiply probability 
times the impact as we did before for the risk index analysis. 

This will give us a peaked curve from which our maximum risk 
exposure is determined. 

The next step is to compare this risk exposure with the 
concept advantage . In order to reduce the advantages to a 
comparable base, they are defined in terms of system advantages 
through sensitivity analysis, and then reduced to a dollar basis, 
much as the impacts were treated. When all of this is accomplished, 
we are then able to compare the risk and advantage on a dollars 
versus dollars basis. 

The preceding example of an advanced risk analysis procedure 
was highly hypothetical, presented primarily to illustrate some 
of the problems which must be overcome in future development. 

Problem Areas 



One of the basic problem areas in risk analysis mentioned 
previously is that of subjective data collection. Figure H-9 
illustrates the form of the probability data which is sought 
from experts in the technical areas . On the left side is shown a 
cumulative distribution curve. It is fairly easy for people 
to think in terms of what is least and most, or best and worst. 

This type of information is obtained first and forms the first 
points on the curves. The subjects must then be led to estimate 
at some other level, estimating 80 $ or 20 % probability for 
instance; there are methods of interrogation which are being 
developed in the behavioral sciences, involving such things as 
choice of gambles and bets, to try to coax this kind of information 
out of people . 

In addition to giving us these probability estimates, 
technical groups also have to tell us what the penalties for 
failure are. In this case, if we give them the cost, schedule, 
and performance variations, they can tell us what this means to 
the contract in dollars or to the reduction in system cost 
effectiveness. This data is generally derived analytically and 
is not subjective in nature. 

The output of the network probability analysis can also be 
represented by a cumulative distribution curve, similar to the 
inputs in form. These distribution curves, as shown in Figure 
H-9j can tell us a number of things in themselves. For instance y 
the left-hand figure tells us that, considering all facts, all 
impacts, we have a 75$> chance of meeting a certain performance 
level. Now, by applying the sensitivity conversion parameters 
for the system we can produce the right-hand figure. This tells 
us, for instance, that we have a $0% probability that the loss 
will not be greater than a certain amount. 
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Some other non-engineering problem areas are outlined in 
Figure H-10. The determination of overall total impact is frequently 
difficult because of factors not amenable to engineering analysis. 

The company reputation might suffer damage beyond the actual 
accountable dollars and cents if a project fails or is delayed 
by the failure of a risk item. Delays may cause damaging 
interference with other projects and failures or schedule 
slippage could conceivably jeopardize other contracts. 

Most of our contracts have some kind of fee or penalty 
feature which can be included in the risk analysis. However , 
if we are striving to reach a wise and prudent decision through 
our risk evaluation 5 we may find that the contractural 
stipulations bias the decision unduly. Then there is the 
matter of self interest. Here again 9 the solution should be 
worked out on a mutual-basis with the customer. Unfortunately , 
very often the advantages you are trying to achieve accrue 
mainly to the customer and the penalties are all yours. 

Management acceptance can be x nearly insurmountable obstacle 
in some organizations. Among managers there seem to be two 
camps . There are those who agree that they most certainly need 
help in making decision involving risk. They recognize the value 
of quantitative help from the engineers who are most familiar 
with the system. Those in the other camp oppose any infringement 
upon their traditional ground by technical personnel. The 
solution undoubtedly will lie in development of viable risk 
evaluation methodology and the education of management in its 
use . 



In conclusion, I believe it is safe to say that in spite of 
the visible problems, we will assuredly see continued development 
in the methodology of risk evaluation and that it will eventually 
alter the nature of the process by which we make our structural 
decisions. If properly applied, it should lead us around a lot 
of the blunders that we have perpetrated in the past in the 
application of new materials and constructions. 



I-lUl 



DESIGN DECISION 



1. COST - WEIGHT 



2. RELIABILITY 



4. RISK 



3. SCHEDULE 



Fig. H-l 



RISK EVALUATION 
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Fig. H-2 
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STUMBLING BLOCKS 



• UNCERTAINTY ASSESSMENT 

- SUBJECTIVE 

-LIMITED HISTORICAL DATA 

- COMPLEXITY 



• IMPACT ASSESSMENT - 

-MULTIPLE ALTERNATIVES 
- DOMINO EFFECT 
-SYSTEM SENSITIVITY 



• DECISION 

-APPLES, ORANGES, AND GRAPES 

Fig. H-3 



QUALITATIVE APPROACH 



•TOP-OF-HEAD PROBABILITY EVALUATION - HIGH, LOW, MEDIUM 



•SOME RECOGNITION OF IMPACT 



•ARBITRARY DECISION BY 'BIG DADDY' 



MOST COMMONLY USED 



Fig. H-4 
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RISK INDEX APPROACH 




Fig. H-p 



RISK INDEX ANALYSIS 



QUESTION: SHOULD THE VERTICAL STABILIZER BE CHANGED TO 

GRAPHITE COMPOSITE CONSTRUCTION. 

ADVANTAGE: GOOD WEIGHT SAVING AT REASONABLE FABRICATION 

COST 

RISK AREAS: 1. BASIC MATERIAL CHARACTERISTICS 

UNCERTAINTY: COMPRESSION AND SHEAR 

ALLOWABLES USED IN DESIGN 
MAY NOT BE VALID 

IMPACT: REDESIGN OF ASSEMBLY AFTER 

ELEMENT TESTS 

2. COMPONENT PERFORMANCE 

UNCERTAINTY: VALIDITY OF GENERAL 

STABILITY ANALYSIS 

IMPACT: REDESIGN, TOOLING SCRAPPAGE, 

AND SCHEDULE SLIPPAGE AFTER 
COMPONENT TESTS 



Fig, H-6 
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RISK INDEX ANALYSIS 



RISK AREA 


PROBABILITY 

<P f ) 


IMPACT 

(1) 


RISK EXPOSURE 
R ■ P f X 1 


MATERIAL 


PROPERTIES 


0. 30 


REDESIGN $ 50,000 


$15,000 


INADEQUATE 

COMPONENT 

PERFORMANCE 


0. 10 


REDESIGN 100,000 

TOOLING 225,000 

SCHED SLIP 


40,000 


INADEQUATE 




(O' TIME) 75,000 

$400,000 

TOTAL RISK 
EXPOSURE 


$55,000 



Fig. H-7 
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RATIONAL PROBABILITY APPROACH 




TSP71 -S6S8 NA-71-691 8 



Fig. H-8 
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PROBABILITY ANALYSIS 




TSP70-4930 



NA- 7 1-691 



10 



Fig. H-9 

PROBLEM AREAS 



•SUBJECTIVE NATURE OF DATA 

•DETERMINATION OF TOTAL IMPACT 
EXAMPLES: 

- COMPANY REPUTATION 

- INTERFERENCE WITH OTHER ACTIVITIES 

- RELATED CONTRACTS 

•CONFLICTING CONTRACTUAL FEATURES 
• SELF INTERESTS 

•MANAGEMENT ACCEPTANCE 

Fig. H-10 
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ADVANCED METALLIC STRUCTURES 



D. A. Shinn 

Air Force Materials Laboratory 



Abstract: The Air Force program on Advanced Metallic Structures 

has the objective to increase structural efficiency, 
integrity and reliability by sponsoring a systematic 
approach to critical structural problems. The 
technical requirements of this program are discussed — 
emphasizing the dual aspects of applying technology 
and disseminating the resulting information to the 
technical community. 



During the preceding presentations we have been listening 
to many aspects of design problems. I would now like to give 
you the outline of an approach toward their solution. Precisely 
how these problems can be solved is, of course, up to the air- 
craft industry. Our approach is to contract to the best offer to 
do the job. 

An Advanced Development Program has been initiated by the 
Air Force Systems Command in the field of Advanced Metallic 
Structures. Its objective is to demonstrate more reliable and 
improved structural design methods, materials, fabrication 
processes, and evaluation techniques. The underlying reasoning 
can be found in some general trends which have become clearly 
visible . 

One consideration is that developments in structural 
design have in the past been spearheaded by challenging tasks. 
Traditionally, technological challenges have been posed by the 
development of numerous new fighter and attack aircraft which 
provided a proving ground for the designer's ingenuity. In 
the early 1950 's, an average of three new projects for fighter 
or attack aircraft were started each year. During the last 
decade and a half, however, this average has been less than one 
in three years, i.e. a shrinkage by an order of magnitude, 
permitting much less opportunity for new and varied structural 
developments . 

Another consideration is that confidence in new structural 
designs can be established only by structural testing. Here 
the lessons are learned for future developments . The record 
shows that for more than 70 systems, tested over a long time 
period, more than half had two or more major components failing 
below design load. The percentage has not improved but actually 
worsened for recent systems, indicating perhaps more rigorous 
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test conditions or, more likely, a basic need to improve 
analytical methods . A very small flaw can have drastic effects 
and cause the loss of an aircraft. We need to improve structural 
efficiency and to avoid structural failures but the lack of 
opportunity to demonstrate new structures has hindered technological 
developments . 

We can see this in its proper context if we realize how 
the development of structures depends on basic research which 
feeds into exploratory development, then into advanced development, 
engineering development, and finally into manufacturing 
technology. These all interact with each other. They all 
provide increased confidence in design, manufacturing, and 
integration. Our current problem arises from the fact that 
nothing has been done in the advanced development area of 
structures. Every one has been preoccupied with their own 
specialties, with no forcing function such as an ADP to make 
them communicate and learn from each other. 

The preceding discussion is an elaboration of the objective 
in the Advanced Development Program. Its purpose, as stated 
before, is fairly straightforward. The approach is actually 
to design and fabricate structures with best available technology 
and to test them as a check on analytical methods. Feedback to 
improve both analysis and test will be emphasized. Another part 
of the approach is to remove the constraints which are normally 
associated with systems development (in production) where time 
schedule and budget considerations usually militate against a 
systematic test and development program. A number of critical 
design problems have been set forth for investigation during the 
entire lifetime of the Advanced Development Program. The first 
of them uses a bomber aircraft wing carry-through structure as 
a baseline . 

Now for the philosophy on this ADP. We had to set forth 
some guidelines as to what we want done and so we picked eight 
technical areas which have to be carried all the way through 
the whole program: 

Fracture mechanics will be emphasized at all times 
across the board; 

Structural materials shall be exploited and evaluated 
with special consideration for heat treatment and 
improved processes using titanium, aluminum, and steel 
as basic candidate materials but not excluding other 
metals or certain mixtures of metals and composites; 

Design criteria will be somewhat more severe than in 
the baseline structure ; 
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Structural design concepts shall employ safe life and 
damage tolerance considerations applied to primary 
structure which is vital to vehicle integrity; 

Structural analysis methods shall incorporate at 
least finite element and numerical solution methods 
for analysis and optimization of structural config- 
urations, including fracture and damage -tolerant 
analysis ; 

Manufacturing methods shall include any new basic 
and secondary methods which are believed to meet the 
objectives of this program; 

Non-destructive inspection shall be evaluated and 
exploited, insuring inspectability within predetermined 
confidence limits; 

Information transfer, last but not least, is particularly 
emphasized at all times for the rapid education of the 
technical community and not just the contractor. 



These eight technical areas have to be considered throughout 
the four phases of the program: preliminary design, detail 

design, manufacturing, and full-scale test and evaluation. The 
idea of the program is to be as diverse as possible in the approach 
to the problem. The requirements call for starting out in the 
preliminary design phase with six concepts which will be weeded 
down until finally one is selected for manufacturing. Originally 
we envisioned that this cycle would be done once and, if it 
were so indicated, it would be done over again as an iteration. 

It remains to be seen whether iteration can be carried out or 
whether the costs will be too high. 

In conclusion, I would like to describe why we feel that the 
ADP is the way to go rather than to continue such effort through 
normal systems development. If you have a problem in a system, 
you are limited in your materials selection, your criteria are 
fixed for you, you have to use proven design concepts and 
conventional manufacturing methods, inspectability is a secondary 
objective, and testing and reporting are kept to a minimum due to 
time and money considerations. 

Fabricability, inspectability, reliability, all these -ilities 
represent the things about which the presentations by Dietz and 
Shuler were concerned. In the ADP, we hope to improve all these 
-ilities up to the next higher level. We will have many more 
choices for materials. We can use innovative criteria. We can 
use the best possible design concepts. Inspectability will be a 
prime objective. Fabrication can consist of variable types, 
whatever we happen to need. Testing and reporting will be optmized. 



1-149 



With this type of a systematic approach, we should be able to 
advance the state of the art in structural design and the 
utilization of structural materials. 
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SUMMARIZING REMARKS 



CDR F. L. Cundari 
Naval Air Systems Command 



It is not easy to summarize these two days of conference. 

I was particularly Impressed by the spirit of free discussion of 
the many technical problems existing in Aircraft Design. Most 
importantly, I have learned that there is a considerable amount 
of work to do in this area. 

In this short time, two days, we did not resolve the 
fundamental design problems. We did not have the time to study 
in depth all qf the basic issues. However, we did expose most 
of the problems . It is important that we capitalize on all the 
issues which we did discuss. In order to provide a reasonable 
avenue for the conclusive discussion of the salient points, I 
am recommending that a short follow-up questionnaire be mailed 
to each participant. Hopefully you will respond with at least 
the same clarity with which you have been able to express your 
points so far. ^ Each participant would have to address in more 
depth the principal issues which have concerned us here. 

What are the basic issues? What are the fundamental 
problems? How can we correct them? 

The methpds for basic static structural design are common 
place. The procedures have been utilized for years. However, 
we have learned that these techniques are not sufficient. 

Structural design procedures must be improved by incorporating 
fracture and fatigue analyses tools into preliminary design. 

A second major area highlighted at this session is the 
contractual procedures .of the United States Government. These 
rules or regulations cannot be changed overnight and are not a 
direct issue of our conference. We must, however, realize the 
impact of the contract regulations on the design technology. We 
are not going to change government contracting overnight nor are 
we going to change the industrial response to these procedures 
any faster. We will always find it difficult to conduct the 
requisite engineering design, and evaluation of aerospace vehicles 
when the government underestimates the task or top management 
underbids a job. 

Let me quickly summarize those points’ which have been discussed 
that have an important impact on the technical details of 
structural design. 
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1. Fatigue and Fracture 



There is a lack of knowledge concerning the basic physical 
fundamentals of fatigue and fracture. It appears that 
the aerospace industry is utilizing some engineering 
approaches to the application of these disciplines 
in design. Most likely these procedures are post 
design reviews and often introduce costly modifications 
or redesign rather than original criteria. So the 
fundamental physical knowledge must be obtained and then 
it must be converted into sound design principles. 

2. Stress Corrosion 



It is a difficult task to introduce the current basic 
knowledge in this field into a methodological design 
procedure. Presently it seems to be either a marvelous 
skill employed by aerospace designers which sometimes 
approaches a level with pure mystic overtones - black 
magic. Often this important technical detail of possible 
stress corrosion is not considered until a failure 
occurs. This aspect of structural /material failure 
must be considered when selecting materials and 
configurations in preliminary design as well as the 
whole iterative design procedure, 

3. Hydrogen Embrittlement & Fretting Fatigue 

Closely coupled with the first two problems are the 
aspects of hydrogen embrittlement and fretting fatigue. 
Both areas have not been fully characterized nor 
quantified to allow the development of design procedures. 

4. Structural Safety Factor 



Reduction of the Safety Factor has been proposed in a 
few discussions. It would be extremely difficult to 
lower the factor of safety currently used in the 
military. Only if a sufficient population of data 
concerning the component or part in question is 
available, will the service organizations be able to 
accept a lower safety factor. 

5. Material Characteristics 



A more comprehensive data bank of material charactersitics 
must be provided. This data must be in a form which is 
easily interpreted and used by the design engineers. This 
information must include variations with temperature, 
both equilibrium and high gradient states; the effects of 



1-152 



the environment including short and long term exposures; 
and of course, fracture and fatigue characteristics, as 
well as the fundamental modules and strength data. 

This aspect of material characteristics is even more 
important for the new composite materials, which may 
have many different reinforcing fiber orientations, 
matrix materials, fiber types, and lamina thickness. 

6 . Materials Processing Control 

The control of the material manufacturing process has 
become an extremely important aspect of air vehicle 
construction. Manufacturing techniques and quality 
control capabilities must become a part of the basic 
design philosophy. The heat treatment and aging 
processes must be fully characterized to reveal the 
resulting effect on the material structural properties 
and the effects on the fabrication quality and cost. 

7. Service /Operational Data 

There is an important need to obtain more sophisticated 
and accurate operational usage data. This needs to be 
coupled with "lifetime remaining” type testing of 
critical vehicle components . Sufficient engineering 
knowledge must be available to develop the cumulative 
damage analysis tools for aircraft and missile design. 

It may be possible that the new emphasis being given to 
vehicle prototypes will allow new, untried structural 
innovations to be adequately demonstrated. This 
approach could permit a better evaluation of alternative 
candidate design of some major components. 

8. Cost Benefit Analysis 



The idea of incorporating the elements of operations 
analysis or risk analysis into the initial vehicle 
candidate designs is a step in the right direction. 
However, the objectives of a national defense force 
are not usually oriented towards pure dollar loss risks 
or continual profit margin minimums . The goals are 
oriented towards weapons performance superiority on 
a competitive basis. Therefore, we should be developing 
performance benefit analytical tools that evaluate the 
potential military combat benefit available for the cost 
of the candidate designs. This is more of a cost- 
benefit rather than a loss-risk type of analysis. It 
appears as though we should attempt to apply some of 
the techniques that have been developed in other fields 
and incorporate them in the design phases of the basic 
airframe . 
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There are many other important considerations in the design 
of air vehicles. I have attempted to list only the major items 
that have been discussed at these sessions. 

The objective of this conference was: "to recognize those 

fundamental design problems which all aerospace companies have in 
common, to clarify these aspects, and to indicate priorities and 
guidelines for a methodological development". I feel confident 
that we have discussed the problem areas. However, I believe we 
have yet to determine all of the approaches for the development 
of a methodological design process. I hope that our discussions 
will be continued until this comprehensive airframe design process 
is established. 

I wish to extend, again, the thanks of myself and everyone 
associated with the Navy and the Postgraduate School to all 
participants. Your expert knowledge and your dedication for 
improving our engineering methods have been exemplary. I know 
that you will all be willing to participate in the development 
of this design methodology. 

I particularly want to extend my warmest appreciation to 
Professor Ulrich Haupt for organizing and conducting this 
conference. His extraordinary interest in airframe structural 
design has kept the direction of the meeting pointed towards 
the important goals of this conference and he has been a guiding 
influence to all of us. 

Thank you. 
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SECTION II 

SOME UNSOLVED QUESTIONS AND VARIOUS COMMENTS 



SECTION II 



SOME UNSOLVED QUESTIONS AND VARIOUS COMMENTS 



Discussions during the symposium began along the lines of 
the designer's problems as indicated by ¥. C. Dietz and shown in 
Figures C-39 and C-40. Some of the comments were made during 
the symposium and some more thorough comments continued coming 
in afterwards . A few of them came from engineers in industry 
who did not participate in the symposium but were interested 
in the subjects. 

The questions which were posed are of the kind for which 
there is no ready-made answer. The comments -- no matter how 
contradictory they sometimes are -- may help to stimulate thinking 
about some of those problems which can be anticipated but are not 
yet clearly visible. After questions have been formulated and a 
discussion has been started, it becomes easier to clarify one's 
own thought. Questions and comments in this section should be 
considered from such a perspective as somewhat of an opening bid. 
No claim is made that they represent a complete and thorough 
probe . 



II-l 



Re>*arJinp 



^rtpbl/ row risk. 



la. Is a concerted effort made to establish a quantitative 
plateau of acceptability for risks as a guideline for the 
engineer? 



Very limited. Some in establishing gust criteria, some 
in repeated load and allowable stress areas. 

* * * 

An effort is made but in qualitative terms rather than 
quantitative. I, among others, have always felt that 
each structural component should be assigned a level of 
risk based upon the consequences of failure and/or the 
probability of experiencing the critical conditions. 

Thus, we would have a variable margin of safety through- 
out the airplane. This has never been done to my 
knowledge -- though it has been discussed. 

* * * 

No. Existing specifications talk about fatigue life, 

fail-safe and safe -life, r i structural integrity but not 

risk . Risk is a bad word that implies failure. Airlines 
specify a fatigue life for design of primary structure 
sufficient to "guarantee" a "crack-free” structure. The 
contract specifies how many flight hours and/or number of 
landings are required. If the structure "cracks" before 
these values the manufacturer must repair it at his 
own expense. The FAR regulation requires a fail-safe 
strength of 80 percent limit load as the ultimate fail-safe 
strength. This implies that the residual strength can drop 
from a positive margin of safety of greater than 1.5 
limit load initially to a minimum of 80 percent limit load 
at the end cf a structural maintenance interval and is still 
acceptable. Of course the manufacturer tries to provide 
an inspection interval small enough to discover cracks 
before the strength drops to the 80 percent limit level. 
Also, the manufacturer tries to provide crack stoppers and 
a low enough 1 g stress level so that the cracks grow at a 
slow rate rather than a fast crack growth rate. All these 
precautions help to reduce the failure probability. 

However, any loss in residual strength increases the 
possibility of an occasional load cf greater than 80 
percent limit load to 1.5 limit load exceeding the residual 
strength. No failure probability is specified although, 
as was shown in lir. Fischler ! s slides, a loss in residual 
strength means an increase in the probability of catastropic 
failure . 
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Although some attempts have been made to specify the probability 
of failure , (i.e., Air Force "Rational Probability of Failure 
for the Fleet" and Lundberg's 1CT 10 Structural failure rate 
per hour), a "quantitative plateau of acceptability" must 
be established which allows "visibility" without excessive 
structural weight increases. "Visibility" can be achieved 
by comparing the failure probability of successful past 
designs to advanced future designs and trying to include 
the important variables in such a way to yield a lower risk 
with new materials and types of construction. 

No. It appears that more static and fatigue testing of 
elements, components and entire vehicles coupled with a 
better assessment of service life failures will be required 
before we can define "acceptably low risk" quantitatively 
for the designer. 

* * * 

No — a risk must be related to factors over which the engineer 
has some feel for and control, such as structural weight, 
cost, life, etc. Methods of risk analysis haven't been 
developed to the point where this can be done in the time 
span that most technical decisions must be made. 

* * * 



lb. What distinction should be made between commercial and 
military fields? 



A very considerable distinction should be made if one can 
accept the idea objectively that a big difference exists 
between the consequences of failure on a 250 passenger 
airliner and the consequences on a one or two man military 
aircraft equipped with in-flight escape devices. This 
means that design for military aircraft can and should be 
based on probabilistic considerations of loads and allowables 
which accepts the possibility of x failures in y hours of 
operation . 

*- * * 

Commercial vehicles should have a lower failure probability 
goal than now exists. The air transport of civilians risk 
should be comparable and less than other means of transport 
(i.e., car, bus, train or boat). Also, with the increase 
in the use of aircraft, (growing at an average rate of 15 
percent per year), failures must be fewer to physically 
maintain the same quantity of failures per year. In 
addition, with the advent of jumbo jets that carry twice 
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the amount of passengers as the DOS’s and 707 f s, a failure 
which results in a total passenrer loss, will be so large 
a disaster that it is unacceptable even if less than 50 
percent as frequent. A purely economic consideration is 
the large financial loss from the law suits that result 
and the high cost loss per vehicle. 

The high failure rate of recent military vehicles has 
resulted in the loss of competent military personnel that 
should not be measured in dollar value. The required 
additional development costs and repairs to correct their 
deficiencies after they occur has been unacceptable. 

Although less publicity is given to military failures, the 
loss has reduced our military strength to an unacceptable 
level . 

Therefore, the failure risk of both commercial and military 
vehicles must be reduced substantially. 

Since commercial vehicles have a desired life of approximately 
20 years with a higher yearly utilization than military 
vehicles with a desired life of approximately only ten 
years, then commercial vehicles must have a lower failure 
probability to account for these factors. Also, if the 
loss of a human being, whether a civilian or military, is 
at the same level, then the risk exposure per passenger 
mile should be the same. Since military vehicles normally 
carry a much smaller human payload than commercial, over 
an average shorter range, (since fighters are short range), 
these factors should also be considered. Military vehicles 
therefore could be designed for a higher risk of failure 
structurally if the acceptable criteria is to match the 
failures structurally per commercial passenger mile. 

Military vehicles, in general, are designed for higher 
load factors than commercial vehicles (i.e. a fighter is 
designed for 7*33 limit load factor and a commercial 
transport for approximately 2.5g). The load factor occurrences 
per mile of a fighter however are higher than the commercial 
vehicle. A higher design load factor for a fighter results 
in a lower 1 g stress level. Therefore, the rate of crack 
growth per hour of flight for a fighter is usually lower 
than for a commercial transport. Therefore, the loss in 
residual strength for a fighter, in spite of the higher 
frequency of loads, is less than for a commercial transport 
per hour of flight. These factors also must be considered 
when comparing the expected failure rate . To overcome the 
disadvantage of such a high design load factor for a 
fighter, high strength steels or titanium are frequently 
used. A slight reduction in strength allowables, (from 
260 , 000 p.s.i. to 200,000 p.s.i.) for steel would increase 
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the fighter life substantially. In conclusion, design of 
the transport or the military vehicle is very dependent 
on the desired life and the environment expected. A 
proper design, considering fracture mechanics . could result 
in an efficient design for either aircraft with an equivalent 
probability of failure (same failure rate per passenger 
mile ) . 

* * * 

The goal for both military and commercial aircraft should 
be to obtain a low level of risk. However, the trade-offs 
for military and commercial aircraft are usually different. 
For commercial aircraft risk must be weighed against cost, 
whereas for military aircraft risk is weighed against 
performance primarily. Therefore, more costly solutions 
to design problems become necessary for a military 
aircraft as compared to a commercial aircraft. 

* * * 

. . . Military should be willing to accept risks to help 
assure early availability of high performance systems. 

* * * 



lc. What is the trade-off between increased probability of 
failure and increased performance for military aircraft? 



None. Higher probability of failure should not be accepted 
to increase performance except in aircraft deliberately 
designed for short life or to meet national emergencies. 

* * * 

. . . Many failures are a function of the poor selection of 
materials for structures, controls, propulsion, and poor 
inspection procedures. All these areas' reliability must 
be improved plus the use of new materials that are more 
damage tolerant (graphite epoxy at low stress levels), 
before the risk of designing for higher stress levels to 
reduce the structural weight and increase the probability 
of structural failure to get increased performance can be 
considered. A systematic failure probability analysis 
which has visibility and is accepted as a standard for 
comparison to get the failure rate lower must first be 
accepted and tested by actual flight performance before 
considering the trade off of parameters . 

* * * 



II-5 



Obviously, increasing the probability of failure should 
result in a lighter, less expensive aircraft, but as the 
probability of failure increases, the overall cost of owner- 
ship of x aircraft in service will increase. 

* * * 

Quantification not really possible. The military risks 
unknowns of new environments and new materials . Best 
thing would be to provide for tolerance of difficulties 
regardless of source as opposed to acceptance of unknown 
risks . 



* * * 



Id. Should different levels for probability of failure be 
specified for different types of failure — partly for 
psychological reasons? 



Yes, but first define Tt failure consequences." The probabilities 
should be tied not so much to the type of failure as to the 
effects of the failure. 

* * * 

Yes . Structural failures are unacceptable by the public . 

The Martin 202 and Comet were types of structural failures 
that the public would not accept. Therefore, structural 
failures should have a very low value so that their 
occurrence should occur once every 20 years, or based on 
the expected passenger miles projected for the 1980’ s, 
values of structural failure that result in the loss of 
only one jumbo jet aircraft from a structural failure in 
20 years . 

Failures occur most frequently from pilot error, power 
failure, system failure, gear failures, and structural 
failures . To improve the overall failure rate a study of 
these failures must be done to uncover why the failures 
occur. Setting different levels of failure is too premature. 
First a better data collection and failure analysis must 
be made to discover the underlying reasons for failures 
that need correction. 



* * * 

Yes, depending on mode of failure, e.g. partial failure 
in fail-safe structure or slow crack growth in safe -life 
structures detectable by routine inspection and repairable 
will permit higher stress levels and conceivably better 
systems performance. 

* * * 
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The probability of failure can not be predicted with any 
degree of accuracy at the present time, so it is not 
feasible to distinguish between different types of failure 
at the present time. Certain parts which can cause loss 
of an aircraft should be considered differently than parts 
that can be lost without seriously endangering the 
completion of a flight or mission. 

* * * 

The consequences of a local buckling failure and a tensile 
failure can be vastly different with respect to safety 
in flight and therefore we might tolerate a higher 
probability of buckling. 

* * * 

Clever design should be able to provide a forgiving or 

tolerant enough structure to make this question not 
relevant . 



* * * 



le. How can the climate in the public and in congress be changed 
from an "anti-technology fad” to an understanding of the 
engineering process and the risks connected with new developments? 



You answered the question. If it is a "fad", time alone 
will improve the climate . 

* * * 

The current "anti-technology" fad, particularly in Congress, 
is in part related to an inability to communicate in a 
meaningful way. Tangled up in the problem are the economic, 
environmental, and social problems that have led to a 
near breakdown in meaningful exchange. It sometimes 
appears that in major weapons systems developments the idea 
is never clearly brought out that there are technical 
problems in such developments that challenge the then current 
state of engineering development and understanding, and 
that their solutions cannot be anticipated at the time a 
contract price is negotiated. Both the developing 
organization and the purchaser (generally, a DoD agency) 
will have to be more candid in discussing (l) possible 
problem areas, (2) the stretching of the state of the art 
to solve the problems, and (3) the risk of success or 
failure. Congress will have to learn how to listen, how 
to question, and how to evaluate with a minimum of political 
haymaking . 

* * * 
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By establishing a reputation for telling the truth. Better 
communications with the legislators at all levels. How 
about a monthly newsletter from each Contractor reporting 
major test, flight, or service failures. With an 
explanation of their cause, correction and technical 
implications -- candid to the point of admitting errors 
of commission and omission. In this some of the calculated 
risks in design could be explained. 

* * * 

Better presentation of the facts and alternatives by news 
media and television reporting are needed. The "anti- 
technology" factions seem to get their points well 
publicized even when there is little technical basis for 
some of the points. The publicity during the SST debate 
is a case in point. The public and many Congressmen seem 
to have difficulty distinguishing the difference between 
someone's theory and results based on experimental evidence. 

* * * 

By the military services, the National Science Foundation, 
the President's Scientific Advisory Board, the Ford Foundation, 
the AIA, the AIAA, the SAE, ASNE, ASTM and other groups 
being contacted to have joint meetings to decide on a course 
of action. Probably a T.V. public relations concern would 
have to help, plus newspapers, plus the college boards, 
and large corporations that need the technology. 

* * * 

I don't believe patience is enough. We have to use the 
media to play up the good side. AIA, ATA, AIAA, SAE, 
etc. all are missing the boat here. 

* * * 

Hostility and fads can only be neutralized by education... 

* * * 

If. How much does the new outlook toward fatigue, fracture 
mechanics, and service life affect our traditional attitude 
about limit and ultimate load factors? 



The detailed consideration of fatigue, fracture, and service 
life in the design of complex aircraft systems can lead 
to better and safer structures . It may reverse the trend 
toward continued utilization of ultra-high strength materials 
of dubious flaw tolerance, which is the direction that 
ultimate and limit load concepts leads . It also is bound 
to stimulate the detailed materials and processes research 
necessary to develop flaw tolerant materials. 

* * * 
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These are new tools which indicate that a critical crack 
length must never occur , that the decrease in residual 
strength due to a crack increases the risk of a load 
exceeding this strength and therefore increases the risk 
of failure of the entire vehicle. To decrease the risk 
of failure the margin of safety of 1.5 should be studied 
further to include the time factor of rate of crack growth, 
loss in residual strength, and probability of failure. 

Notice that for titanium and graphite epoxy a/> ultimate 
strength to one "g” stress must have a factor of more than 
3*75 (1.5 x 2.5 g) for a transport critical for the limit 
load factor for maneuver of 2.5. 

* * * 

This is a healthy attitude provided it doesn’t go overboard. 
Structural engineers have always considered fatigue, 
fracture mechanics, etc., at least since the 1930’s. But 
it takes a political hot potato like the F-lll and its 
problems to dramatize the problem. We will always have 
to be concerned about static loads -- but with more and 
more emphasis on probability of occurrence. 

* * * 

I don’t think that fatigue, fracture mechanics, and service 
life is changing our attitude about limit and ultimate 
load factors at the present time. The limit and ultimate 
load factors used provide a sort of baseline configuration 
from which to work. Structural weight must then be added 
to meet other requirements such as structural life, damage 
tolerance, etc. It will be some time before structures 
can be designed on the basis of failure probability rather 
than on the basis of an ultimate load factor of 1 , 50 . 

* * * 

Design for service life makes the ultimate load factor 
concept obsolete and of little value. The design must be 
based on a load spectrum that includes a limit load 
defined as the load the vehicle must sustain with some 
prescribed probability of success on the last mission 
in its total service life or in each inspection interval. 

* * * 

I’d say anyone that thinks traditional factors should be 
attacked does not really know the vagrancies of our 
knowledge base, I believe in rationalization but not 
exploitation! 

* -x- * 

It has not "sunk in 11 that improved methods of analysis, 
materials with yield to ultimate strength ratio different 
from aluminum alloys, better load prediction methods, 
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